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IMROOKIION 

I  he  use  ot  various  lorm>  ol  Anihci.il  intelligence  (Al)  techniques  to  help  solve  problem*  Mated  lo  (ujidutkc  and  l  onhol  (luA.(  ) 
is  a  siihieei  ol  euneni  intcrcsi  in  ihe  held.  Mosi,  il  not  all.  ot  the  pi.kik.il  application*  utilize  knowledge  Rased  techniques  io  cicaic 
so-called  "I- xpert  Systems.”  I  hese  systems  seetn  to  offer  solutions  to  (uiid.mcc  and  <  onttol  problem*  t.’iat  June  a  large  rude  incut  come'  ■ 
i  samples  include  maintenance  systems  and  real-nine,  decision  aiding  system* 

Ihe  ohiectivc  ot  this  lecture  Senes  is  10  present  a  number  ol  application  onenied  lectures  augmented  t>s  sew at  iir.oual  ledm.*. 
all  presented  h>  (iuidaneeand  Control  prachiionet*  I  he  lectureis  come  trom  several  ol  the  paitiupaimg  \( »  \Kl>  countue*.  speeilitail- 
the  I  n ued  States,  Canada.  I  ranee.  I  lined  kingdom,  and  West  (icrmanv  We  have  Id lectures  and  will  conclude  with  a  lound  table  disviissioi. 
involving  all  ihe  participants. 


(.CIDANtl  AM)  COMROI  PKRSPM  IIAf 

Ihe  Cimdunce  and  (.  ontrol  held  lias  seen.  over  the  past  ft*  sear*.  the  uiitodik  non  ot  a  vciv  l.uee  e;onp  . ■  i  iccImioIoimc* 

In  the  control  system  design  arena,  we  have  passed  from  vtif  and  fry  design  techniques  based  upon  f requeue v  domain  ai\msr*  took 
most  applicable  to  single-input,  single-output  systems  through  svuihesis  tevlunqiies  tor  mulnv. triable  sv  stems  involving  optimization  icdi 
mques  based  in  the  time  domain.  W'c  have  leeently  aimed  at  modern  technique*  dial  blond  the  capability  ol  tiequeiicv  domain  icdinKjuo 
to  deal  with  svsiem  modeling  uncertainty  and  the  capability  ol  state-space  multivariable  techniques  io  deal  multiple  inputs  and  outputs 
to  the  advantage  ol  both.  I  he  formalization  ol  the  estimation  problem  provided  b>  the  kalniati  iiltei  has  Jan  tied  the  appioat  h  to  comer  ting 
measurements  into  state  estimates  lor  controls 

l  sing  these  techniques.  v\e  have  implemented  aucrati  High'  ouinol  system*.  amom.uu  l.uiding  systems.  missile  emd.tme  psiem*. 
automatic  navigation  systems,  and  spacecratt  guidance  and  conttol  system*  to  niention  .<  tew 

Sensor  technology  developments  m  Radats.  I.lectro-optk  Svsteins.  .nut  Inertial  Measiiiemem  Svsteins.  coupled  with  advances  m 
communications  svstenis.  computers,  and  displays,  have  made  n  possible  to  gathci.  process  and  pieseni  to  the  human  opeiaiots  uicieJible 
amounts  ot  in  lot  mat  ion.  I  nfortunatelv.  not  much  has  been  done  to  .i-  m  the  operators  ■.<  .u«  .*n  tlu  ltitoi  uiaiion  presented 

lor  esample.  a  modern  lighter  aireialt  cockpit  is  Idled  with  displays  ilmi  can  pccseut  .ill  the  data  available  on  the  .uuiah  and  olten 
do  l ■  vet > where  the  hand  can  reach,  and  some  places  u  cannot,  are  'Widio  and  buttons  t« ■  coniiol  the  various  weapons,  sysiems.  and 
displays  I  he  control  stick  and  throttle  levers  are  coveted  w  nh  so  mam  push  buttons  that  a  pit*  ■'  w  uh  seven  l meet'  on  eac h  hand  n  ;eh: 
have  an  overwhelming  advantage  over  his  more  traduionallv  equipped  adveisaues  Meanwhile  the  prim  must  keep  hrs  eve*  outside  the 
cockpit  to  find,  identify,  and  attack  taigets  and  avoid  attacks  bv  othcis  all  while  avo.dmc  eiomut  collision 

I  lie  digital  compuiei  lias  impacted  <  uA(  from  iwo  duedioiis  li  makes  possible  ih.  -.inplcnicutation  of  large  *vsivin«  liiili/me  .oiuplc' 
algorithms  and  control  logic  when  imbedded  m  the  vehicle,  li  also  becomes  the  engineer  me  tool  that  maki*  possible  tlu  design  and 
analvsis  of  such  systems 

I  fie  availability  of  computers  that  provide  ever  mcieasing  amounts  . 1 1  compiiimg  capabiluv  lias  prompted  scientists  m  erasp  .< >  Hu 
dream  of  creating  systems  which  exhibit  humanlike  intelligence  and  icusoiung  powers  I  his  held  has  been  named  \ititkial  InMhgeiki 
Although  true  humanlike  reasoning  capability  may  be  forever  beyond  our  reach,  practical  .apabilrres  frau  resulted  .'miii  <‘hn  work 

knowledge  Rased  or  I  Xpert  Systems  aie  the  principal  topic  ol  this  I  ecture  Senes  because  the  rluoiv  in  this  area  hu*  re.ulied  a  lev  J 
ol  maturity  that  makes  n  possible  lo  construct  uselul  systems  which  soke  (uuduikc  and  t  ontrol  probleriis 

[  he  systems  that  will  be  discussed  deal,  in  some  wav  or  olhei.  with  problems  vs  Inch  normally  reqi  iu  human  ludgmeiu  and  ntcr  ventioii 
I  hese  problems  have  been  found  to  be  generally  intractable  to  algor nhtniv  techniques  Wc  w  ill  di-  ,. (namieuaiue  'vs'ciii*  lot  » i unpk 4 
electronic  equipmeni  and  txperl  Systems  for  air  Iraltic  control.  We  v\ill  hear  about  an  I  \peri  Svsiem  l*u  najeciorv  managenicir  o' 
aircraft,  and  a  thrust  toward  the  unmanned  combat  aircr.ilt  and  problem'-  and  solution*  which  'hat  vvrli  bring 

for  the  henefil  ol  those  no*  conversant  with  VI  techniques,  including  the  Director,  wc  will  hear  several  application  eleven  tutorials 
on  the  overall  technology  ol  Al  as  applied  to  the  (luidance  and  C  onttol  held,  the  knowledge  I  ngimviing  process,  ihe  conliguiatioi. 
of  an  I  xpert  System,  and  a  discussion  ot  issues  aimed  at  real  tunc  systems 

Ihe  lectures  as  a  whole  provide  overlap  in  both  the  application  and  the  theory  areas  I  have  encouraged  this  overlap  and  view  it  .i' 
a  strength  since  u  gives  the  listeners  the  hcnelii  of  several  points  ol  view 

OltRVItttSOf  THF  IKCTIRKN 

lecture  I: 

Ihe  first  lecture  is  by  Dr  Harold  lone*  ol  Ihe  l  ntlccJ  Stales  It  is  titled  "Al  I  xpert  System  Icchnologv  for  (umlance  and  <  onnol 
Issues”  It  is  aimed  specifically  at  F- Xpert  System  issues  pertaining  to  laciical  .mcraft  and  deals  diiectlv  witli  some  ol  the  issues  that  l 
raised  in  the  Introduction 
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A  key  concept  discussed  is  the  distinction  between  conventional  problem-solving  techniques  and  the  Expert  System  approach  The 
conventional  approach  produces  a  deterministic  response  to  all  anticipated  circumstances  but  will  produce  unanticipated  responses  to 
unanticipated  situations.  The  Expert  approach  has  additional  information  built  into  its  knowledge  Base,  approximating  the  resources 
of  a  skilled  problem  solver.  The  Inference  engine  provides  the  mechanism  to  attack  the  problem  with  these  resources. 

Dr.  Jones  goes  on  to  address  Expert  System  technology  issues  in  the  context  of  applications  to  combat  aircraft 

The  first  of  these  deals  with  real-time  A!  and  requires  the  system  to  be  capable  of  keeping  up  with  events,  i.c..  the  problem  is  changing 
even  as  we  work  toward  a  solution.  In  addition,  answers  are  required  in  a  timely  manner  or  they  are  not  relevant. 

The  next  issue  is  Mission-Critical  or  l.ife-C'ritical  Software.  This  is  an  important  issue  in  Guidance  and  Control  in  more  conventional 
applications,  especially  flight-critical  control  systems  for  manned  aircraft.  In  our  attempts  to  deal  with  software  errors,  the  software 
is  controlled  with  extensive  documentation,  backup  software  is  installed  to  be  triggered  upon  some  predetermined  indication  of  a  failure 
in  the  primary  software,  and  some  design  teams  have  adopted  an  approach  to  redundant  systems  that  requires  dissimilar  hardware  and 
software  to  eliminate  common  faults. 

The  Expert  System  software  acquires  additional  capability  as  time  goes  on  and  implicitly  has  the  capability  to  jump  to  a  conclusion 
just  as  a  human  might.  Expert  Systems  cannot  be  tested  in  the  same  context  as  conventional  systems  because  of  this  opportunistic  nature. 
The  complete  software  testing  that  is  desirable  for  mission  or  flight-critical  software  is  just  not  possible  for  an  Expert  System. 

The  third  issue  discussed  by  Dr.  Jones  is  the  interface  with  all  of  the  conventional  information  gathering  and  extracting  hardware 
and  software  aboard  the  aircraft.  He  points  out  that,  for  an  Expert  System  to  work  in  the  capacity  of  an  advisor  to  the  pilot,  it  must 
have  all  available  data. 

A  most  critical  technology  issue  is  the  communication  with  the  pilot.  This  must  take  place  even  as  the  pilot  is  in  life- threatening  circum¬ 
stances  and  may  be  disinclined  to  talk  to  his  machine,  t  he  information  passed  b>  the  system  must  be  trustworthy  even  if  the  Expert 
System  is  being  ignored.  This  subject  will  also  be  addressed  by  other  lecturers. 

The  Knowledge  Acquisition  process  for  the  system  is  especially  complex,  ft  is  being  gathered  for  systems  with  capabilities  never  before 
tested  for  a  population  of  users  who  are  distinctly  individualistic  in  how  they  operate.  The  Knowledge  Base  must  be  gathered  in  a  timely 
manner  to  be  useful,  but  there  is  no  way  to  decide  when  the  process  is  complete  or  if  all  the  rules  that  are  included  work. 

The  last  of  Dr.  Jones’s  technology  issues  deals  with  the  probable  need  for  concurrent  or  parallel  processing  to  deal  with  the  very  heavy 
computing  load.  A  partitioned  system  such  as  this  may  be  likened  to  a  committee  of  computers  trying  to  come  to  a  decision  when  each 
of  them  has  incomplete  data  and  reasoning  power. 

lecture  2: 

The  second  lecture  of  the  series  is  by  Mr.  Michel  Muenier  of  France.  It  is  entitled  “DEDAL  E:  An  Expert  System  tor  Analog  System 
Maintenance!’  Mr.  Muenier  discusses  the  need  for  an  Expert  System-based  maintenance  system  to  deal  with  today’s  complex  electronic 
systems.  Electronics,  especially  analog  electronics,  require  sfciffed  technicians,  familiar  wrrh  r  he  equipment.  i<>  vncoecv  fully  diagnose  faults. 
These  people  generally  are  not  available  at  the  time  and  place  of  need.  Automated  capabilities  are  needed  to  deal  with  equipment  I  allures 
in  a  timely  manner. 

The  Expert  System  methodology  is  particularly  appropriate  because  of  the  separation  of  the  representation  of  know  ledge  and  its  exploita¬ 
tion.  This  provides  the  flexibility  to  allow  the  knowledge  base  to  be  upgraded  as  the  troubleshooting  data  is  acquired. 

The  main  body  of  the  paper  is  organized  into  four  chapters. 

I  he  first  chapter  deals  with  the  knowledge,  the  current  knowledge,  and  the  troubleshooting  knowledge. 

The  second  chapter  lakes  us  through  a  DIDA I  E  session  from  the  acquisition  of  the  circuit  ami  malfunction  data  through  the  trouble¬ 
shooting  process  implanted  in  DEDAL  E 

I  he  third  chapter  deals  with  the  Knowledge  Representation  in  terms  of  frames  and  rules.  I  his  provides  a  detailed  discussion  of  the 
representation  of  knowledge  within  DEDAL  E.  The  knowledge  is  stored  in  frames  as  objects,  attributes,  facets,  and  values.  I  he  rules 
utilize  forward  chaining  and  backward  chaining  and  are  organized  m  frames  as  is  the  Knowledge  Base. 

The  last  chapter  deals  with  the  various  man  machine  interlaces  of  the  system.  There  are  three  of  these:  the  expert  and  the  Knowledge 
Base,  general  information  on  the  particular  circuit  under  test,  and  specific  information  on  the  cram  under  lest  I  he  general  information 
is  acquired  from  data  files  when  the  circuit  is  designated  to  be  tested  I  he  specific  data  is  acquired  interactively  from  the  technician 
while  he  is  troubleshooting  the  circuit 

DEDAl  E  is  a  Working  prototype  that  will  be  extended  within  the  L  Ml(  Al  Expert  System  development  environment,  which  is  discussed 
in  Mr  Muenier''  second  lecture 

lecture  3: 

The  ihird  lecture  is  one  of  two  independent  lectures  dealing  with  the  Ait  Iraflic  Control  (\1(  )  problem.  It  is  b\  Dt  B  A  Bowen 
o!  (  anada  and  is  titled  “An  Expert  System  for  Arurall  Conflict  Resolution  in  Dense  Airspaces"  In  this  Icvtutc.  Dr  Bowen  describes 
the  problem  faced  by  Air  Irattic  <  'out rollers  on  an  everyday  basis  as  one  requn mg  the  intelligence  to  perceive  potential  conflicts,  ouplcd 
with  the  experience  to  make  proper  decisions  all  m  a  timely  manner  All  this  must  occur  under  coiulthons  that  often  are  verv  stressful 
because  ol  i lie  potential  tin  disaster 

I  he  A f  C  problem  is  characterized  bv  a  number  of  rules  and  procedures  that  are  decomposable  into  teachable  subtasks  This  is  done 
routinely  in  the  teaching  of  new  controllers  Therefore,  n  litsmcelv  into  the  domain  ol  knowledge  Based  s\ stems  Algorithmic  techniques 
nave  failed  to  solve  the  Aft  problem  because  the  conipuiatton.il  load  grows  exponent  tails  with  the  numbei  ot  aircraft  Eon  ions  of  the 
problem  are  tract  able  to  analytic  techniques,  therefore  Dr  Bowen's  system  design  is  a  hvhnd  one 


I  hc  prototype  system  is  described  in  some  detail  in  the  paper.  I  he  system  is  tirsi  developed  lor  sparse  airspace  problems.  i.e..  one-on-one 
problems,  and  developed  to  covet  the  more  tealistic  problem  of  dense  airspaces  where  the  resolution  may  cause  subsequent  conflicts. 

I  he  subject  of  convergence  is  discussed. 

lecture  4: 

The  fourth  lecture  is  by  Dr.  Michael  Bird  and  is  titled  “Application  oj  Knowledge  Based  'Ice Uniques  to  AtrcraU  Irajeeiory  and  Con¬ 
trol"  This  lecture  will  discuss  the  implementation  ol  the  l  nil  tod  Irajectoiy  (onirol  System  (l  U  Sj  I  he  l  IC  S  is  a  hvhnJ  >vsicm  that 
uses  algorithmic  techniques  to  fulfill  the  various  trajectory  genetation  functions  and  an  F  xpert  System  to  integrate  and  select  troin  the 
various  trajectory  solutions. 

The  I'TC'S  utilizes  production  rules,  an  Inference  F'ngine.  and  a  system  of  frames  foi  comma nica ting  with  the  trajectory  generation 
systems.  The  trajectory  generation  modules  are  termed  trajectory  specialists  since  each  is  responsible  for  a  different  type  of  trajectory 
The  integration  of  the  specialists  operations  is  performed  by  an  Fxpetl  System  called  by  l)r.  Bird  the  Irajectoiy  Decision  Maker  ( I  DM) 
Ihe  TDM  schedules  the  specialists,  makes  trade-offs  between  them,  and  blends  then  outputs  into  the  full  trajectory  solution. 

The  I  DM  is  based  on  the  use  of  a  production  rule  system  and  a  frame  system.  I  he  frame  system  is  the  inlet  lace  to  the  irajectoiy  specialists. 

Dr.  Bird  discusses  m  depth  the  approach  to  the  construction  of  t his  hybrid  system,  the  interaction  between  the  I  DM  and  the  special¬ 
ists.  and  the  varying  detail  required  of  the  trajectories  at  each  stage  in  the  decision  process.  \  concept  was  developed  to  deal  with  the 
uncertainty  level  inherent  in  the  trajectory  predictions. 

I  R'S  was  simulated  for  a  section  of  a  low-altitude  combat  mission.  I  he  simulation  included  five  of  the  trajectory  specialists  and 
flew  an  aircraft  and  Bight  control  simulation  over  a  land  mass  simulation  of  the  l-ulda  (hip  area,  including  some  ground-to-air  threats 

The  simulation  was  programmed  partially  in  FORTRAN  and  partially  in  USB. 

Iicturc  5: 

The  fifth  lecture  is  by  Dr.  Brian  hllis  and  is  titled  “lowards  the  Unmanned  Cockpit.”  In  his  Icctute  lie  considers  the  application  <»t 
Intelligent  Know  ledge- Based  Systems  (IKBS)  to  the  task  of  replacing  the  pilot  in  combat  aircraft.  The  motivation  tor  such  a  step  is 
the  rapidly  growing  complexity  of  the  pilot's  task  in  the  combat  environment.  Currently,  the  pilot  is  required  because  ol  his  data  correlation 
capability  and  his  ability  to  jump  to  intuitive  solutions  to  complex  problems.  The  system  that  ultimately  replaces  the  pilot  will  have 
to  exhibit  these  traits 

According  to  Dr.  F.llis.  the  path  to  the  unmanned  cockpit  will  begin  slowly  and  carefully  with  the  use  of  an  intelligent  assistant  w  Inch 
will  integrate  and  provide  for  the  pilot's  use  the  Knowledge  Base  of  multiple  Fxperts.  IP  he  useful,  the  assistant  will  have  to  have  contextual 
awareness,  examine  alternative  solutions,  and  will  bo  self-learning  and  self-extending.  It  will  be  adaptable  to  the  need'  ol  the  individual 
specific  pilot  and  will  provide  intelligent  explanations  appropriate  to  ihc  situation 

Areas  that  can  and  will  benefit  from  the  application  of  IKBS  include  premission  and  real-time  mission  planning  and  a  signal  processing 
and  data  fusion  capability  10  present  integrated  situation  data  to  the  pilot,  An  intelligent  system-monitoring  capabilitv  to  deal  with  equipment 
failures  will  also  be  valuable.  I  he  IKBS  will  independently  control  displays  so  as  to  present  appropriate  displays  and  pet  tor  in  luvcssutv 
resource  allocation. 

Dr  I  111'  will  disuiss  the  present  state  of  IKBS  and  progress  along  the  path  to  it'  ultimate  realt/aiion 

lecture  6: 

The  sixth  lecture  is  by  Mr  I.  I’.  Atiheti.  It  is  an  application  lecture  dealing  with  hardwaic  tault  diagnostics  I  he  lecture  is  ruled  “  low.ud 
a  (icncral  Fault  Detection  and  Maintenance  System  ( I  he  Flag  2  Protect)"  Mr  Auherf’s  application  is  an  aircialt  navigation  svstein  of 
considerable  voinplcviiv  I  he  svstein  described  is  a  second-generation  Ixpcri  Svstem 

I  he  first -general itm  svstem  consisted  of  a  set  of  rules  and  tests,  the  knowledge  of  ihc  test  costs.  t he  replacement  costs.  and  the  failure 
probabilities  ot  the  various  components.  It  opeiated  on  the  svstem  failures  m  such  a  wav  to  opnnn/e  the  expected  repair  coos  (  ertum 
e lit ic i 'it •'  were  made  ol  the  "ay  m  which  it  worked  ami  ate  discussed  in  the  lecture  I  he  cuitem  s\steiu  answer'  these  ciiti.i-nu 

No  miporiant  change  in  the  second  generation  «vstcm  is  the  incorporation  ot  a  Knowledge  Vqmsuion  Svsiem  fK  \si  that  allow* 
the  Navigation  I  xpcit  to  describe  the  system  in  a  sirueli.ial  ami  timctional  dc'C’ ipn-us 

It  is  dear  in  Mr  Airbert's  lecture  that  the  incorporation  ol  the  Knowledge  Xcqtmition  System  was  the  kev  to  the  Miccesstii.'  irriplcmcn'.i 
lion  ot  the  I  lag  >  I  sport  System.  The  K  AS  is  described  as  general  enough  to  he  used  in  other  applications  that  exhibit  similar  *hat.Meii>tki 
io  i he  suhicci  navigation  system. 

lei  lure  7: 

I  he  seventh  lecture  is  a  tutorial  lecture  hv  Dr.  Bird  titled  “A  Review  of  the  Knowledge  Fiig.neeitng  Process"  In  tho  lecture  Pi  Bn.t 
discusses  the  concept  ot  the  F  xpert  System  as  a  combination  ol  two  hmdamcnial  par  is.  the  Knowledge  Base  and  the  InlcKikc  I  ngnu 
I  he  Knowledge  Base  holds  the  tacts,  heuristics,  and  problem-solving  rules  I  he  Inference  Fngim  a  th  procedure  tor  using  the  Knowledge 
Base  for  solving  a  given  problem. 

I)r.  Bird  reviews  the  various  Knowledge  Fngineerine  approaches,  in  particular  those  that  concentrate  on  using  human  experts  ,o  knowledge 
sources.  I  he  approaches  arc  explained  whereby  expert  knowledge  is  captured  in  an  appiopnatc  data  base.  I  he  various  techniques  u«j 
representing  knowledge,  such  as  first-order  predicate  logic,  semantic  networks,  frames,  and  production  rules,  ate  discussed  m  lot  aw  vU 
their  structure,  advantages,  and  disadvantages. 

His  next  topic  is  the  knowledge  acquisition  process,  which  is  subdivided  into  the  idem,  treat  ion.  conceptiiah/ation,  formalization, 
implementation,  and  testing  stages.  An  important  topic  in  the  Knowledge  Engineering  process  is  the  tools  that  are  required  to  make 
the  development  ot  F. Xpert  Systems  practical.  In  particular,  the  various  A!  programming  languages  such  as  I  ISP.  PROlCKi,  ops*. 


J-4 


ART,  and  KEE  are  discussed.  System-building  aids  and  support  facilities  are  also  explained.  Dr.  Bird  closes  with  a  discussion  «t  ilie 
validation  process  in  terms  of  the  validation  required  of  normal  computer  programs. 

lecture  8: 

The  eighth  lecture  is  titled  "A  Rule  Based  System  for  Arrival  Sequencing  and  Scheduling  in  Air  Traffic  Control"  and  is  presented 
b>  Dr.  Uwe  Voelckers.  This  lecture  deals  with  the  Air  Traffic  Control  problem  as  does  Dr.  Bowen's  first  paper. 

Dr.  Voelckers’  lecture  opens  with  an  introduction  to  the  Air  Traffic  Control  problem  and  particularly  la  the  task  assigned  to  the  Air 
Traffic  Control  Officer  (ATCO).  The  task  of  the  ATCO  has  remained  a  manual  task  even  as  automation  has  taken  over  much  of  the 
signal  processing.  The  ACTO  still  must  manually  control  the  aircraft  assigned  to  him  within  the  controlled  airspace.  A  completely  automated 
system,  with  ACTO  monitoring  only,  is  considered  unacceptable  even  if  possible.  A  Know  ledge- Based  Expert  System  offers  the  possibility 
of  providing  an  acceptable,  extendable  system  that  can  appropriately  advise  the  ACTO. 

He  goes  on  to  discuss  the  current  efforts  to  apply  Al  techniques  to  the  AIC  problem,  followed  by  a  brief  description  of  the  organization 
ol  the  Expert  System,  which  is  similar  to  several  of  the  Expert  Systems  described  by  other  lecturers. 

The  lecture  moves  on  to  cover  a  more  detailed  presentation  of  the  arrival  sequencing  problem  as  it  exists  today  with  a  discussion  ol 
problems  and  limitations. 

T  he  main  topic  of  the  lecture  is  the  discussion  ol  the  computer-based  arrival  planning  system  with  its  evolution  from  the  algonthniic- 
based  COM  PAS  system  to  the  hybrid  PLANAlR  COM  PAS  system.  The  lecture  includes  a  discussion  of  the  architecture,  the  Inference 
Element,  and  the  Knowledge  Base.  The  Knowledge  Base  is  subdivided  into  the  static  and  dynamic  ATC  knowledge  and  the  rule  base. 

1  he  planning  strategics  are  discussed  in  some  detail. 

Dr.  Voelckers  contends  that  the  rule-based  PI  ANA1R  system  establishes  a  proper  planning  sequence  according  to  rules  t  hat  arc  used 
by  ATCOs. 

lecture  9: 

T  he  ninth  lecture  is  by  Mr.  Muenier  and  is  one  of  our  tutorial  lectures.  It  is  titled  “How  to  Use  PROLOG  for  Lxpcri  System  Develop¬ 
ment!'  In  his  lecture  Mr.  Muenier  discusses  the  use  of  PROLOG  as  a  language  for  Expert  System  development  and  the  necessary  environment 
and  additional  facilities  for  industrial  use. 

PROLOG  has  been  favored  for  Expert  System  development  by  some  groups  but  has  been  disappointing  in  othei  efforts.  I  his  contradiction 
arises  because  several  approaches  are  possible  when  PROLOG  is  used  as  a  development  tool.  One  approach  is  to  use  PROLOG  directly 
vis  a  specification  language  and  use  the  direct  features  of  the  language  as  a  reasoning  mechanism.  Another  approach  is  to  use  PROI  OCi 
as  the  implementation  language.  In  this  case,  the  knowledge  formalism  is  defined  as  required  and  implemented  in  PROI  OG.  Both  approaches 
have  deficiencies  that  Mr.  Muenier  discusses. 

T  he  remainder  of  the  paper  discusses  EMICAT  (M14),  which  is  an  environment  developed  by  Mr.  Muenier  and  Ins  associates  at  l  lev- 
tronique  Serge  DASSAUl.T  specifically  as  an  industrial  environment  for  the  development  of  Expert  Systems. 

EMICAT  integrates  the  advantages  of  the  PROl.OG  language  with  the  additional  features  and  capabilities  required  to  fulfill  the  design 
team's  needs.  These  include  advanced  Expert  Systems  features  as  well  as  services  such  as  graphics  support,  editing  capability,  and  Knowledge 
Base  archiving  required  in  the  development  of  real  products. 

lecture  10: 

The  tenth  and  last  lecture  is  by  Dr.  Bowen  and  is  titled  “Real  Time  Expert  Systems:  A  Status  Report!'  In  this  lecture  Dr  Bowen  discusses 
and  reviews  the  current  state  of  the  art  with  respect  to  real-time  applications  of  Expert  Systems.  Many  of  the  Guidance  and  Control 
applications  of  Expert  Systems  discussed  during  this  lecture  series  fit  into  this  category  so  it  is  a  subject  of  much  interest. 

Dr.  Bowen  gives  us  a  perspective  on  the  control  problem  in  general  and  goes  on  to  describe  some  reasons  why  an  Expert  System  could 
be  the  preferred  approach  to  a  system  solution. 

In  keeping  with  the  title,  he  discusses  the  nature  of  the  real-time  problem  and  exposes  the  system  requirements  that  flow  Horn  the 
real-time  consideration. 

Dr.  Bowen  goes  tin  it*  review  and  describe  10  applications  of  Know  ledge- Based  techniques  to  con'rol  system  examples  1  hese  examples 
range  from  military  to  process  control  and  arc  programmed  in  LISP,  Pascal.  (>PS>,  and  PROIOG  In  his  reviews  he  covets  ptoblcm 
domain,  design  goals,  architecture,  knowledge  representation,  infcrencing,  language,  status,  performance  assessment,  and  lumie  work 

At  the  conclusion  ot  the  system  reviews.  Dr.  Bowen  gives  us  ho  view  ol  unresolved  issues  and  problems  These  include  tlu*  dominance 
ot  surface-level  considerations  to  the  exclusion  of  deep  know  ledge  of  the  process  physics  1  he  w  terns  deal  only  with  static  -civ  ot  system 
parameters  and  cannot  deal  with  dynamic  problems.  Additional  issues  discussed  include  Knowledge  Base  representation  and  consistency. 

CONCLUSION 

It  ts  clear  that  this  lecture  serie  has  brought  together  a  representative  number  of  applications  of  Know  ledge- Based  systems  that  spans 
the  field  of  Guidance  and  Control.  The  difficult  issues  in  the  various  application  areas  have  been  uneoveied  and  ilUisttated 
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The  increasing  sophistication  of  modern  digital  avionics  could  conceivably 
overload  the  system  management  capabilities  of  the  tactical  aircraft  pilot.  Indeed, 
field  interviews  have  verified  that  the  operational  pilot's  role  includes  significant 
time  in  managing  complex  electronics  systems.  Often  the  pilot  must  decide  which  systems 
to  trust  both  mission  success  and  personal  survival  to  with  only  a  rudimentary  comprehen¬ 
sion  of  the  system  components  and  their  behavior.  The  AI  field  of  expert  systems  could 
make  a  substantial  contribution  toward  improving  both  aircraft,  mission  effectiveness 
and  the  pilot’s  sense  of  situation  awareness.  To  meet  this  challenge,  however,  the 
research  and  development  community  must  resolve  a  number  of  signficant  technical  issues 
which  could  otherwise  limit  the  capability  and  acceptability  of  expert  systems  for  coping 
with  mission-critical  flight  situations.  This  paper  provides  a  perspective  on  a  set  of 
technical  issues  which,  if  unresolved,  could  limit  the  capability  and  acceptability  of 
expert  systems  decisionmaking  for  avionics  app  1  i  cat  i  ons .  i-ix  amp  levs  front  on-going  ‘-Xpert 
system  development  programs  arc  used  to  illustrate  1 i ko 1 v  architectures  and  applications 
of  future1  intelligent  avionic  systems. 

INTRODUCTION 

Ih<-  advent  of  powerful,  relatively  oor!i«nn,il  IIM'  machines  in  the  past  feu. 
years  has  generated  intense  interest  in  expert  systems  applications  within  t h*  !  n i t c d 
St. lies'  research  and  devel » .pment  community.  Hp-rc  have  !»•»  n  a  handful  <>!  at  knowledge! 
successes,  and  an  abundance  of  new-,  promising  applicat  ions  in  i  wide  r.«nge  of  <!is.  i- 
pitnes.  for  the  most  part,  these  expert  systems  p«-rf<  rtr.  diagnostic  or  tutorial  f  .i.  - 

ti'-r.s,  tvpnallv  m  an  err.  i  ron.iient  *hnh  permits  >1 1  n  -  t  humir.  oversight  mci  whi-  h  im¬ 

poses  only  loose  requ  l  tv-men  t  s  for  timely  «|e«  i  s  i  onmak  •  ng  . 

Recent  initial  iV'.  s  within  the  Department  Defense-  have  begun  to  to,  ns  .it  ter. - 

lion  on  the-  potenti.il  of  expert  systems  for  il  lcvi.it  ir.^  t  h«  piiot  sensory  overload  prob¬ 
lem  in  next  -  general  i  ai  t.n  In  i)  ut  raft,  and  for  .nl.ipt  iv<  !v  i  ul-ring  the  ainritt 

peri'*  nnanc  c  >  ha  rac  t  e  r  i  s  t  i  -.  s  to  s  p>.  i  t  i  mobiun  -  -  b  t  •  t  :  -.  •«-  s  ,»nd  .  n.  -.insi.in  os.  In  do 1  n  g 

so.  t  he  DoD  has  sc  let  ted  an  appl-.  -it  :  • -n  doniain  <  har.e  t'-r./ed  by  the  need  for  mts'-ion- 
and  .  i  f  •  -  -  c  r  1 1  i  <  a  1  dc- «  i  s  i  >  -ni.i.ik  i  ng  and*  r  rigid  t  i  me  ■  *ns  t  r  a  i  n  t  s  .  V  j  *  t  n«-  j  m-  re,  an  intcl- 

liger.t  a  v  i  on  i  c  s  s  v  s  t  .  in  must  perform  *  h  i  s  d«  ■  i  s  i  >nma  *  ;  ng  b  is»  cl  on  impre*  isi  and  possibly 

l  rv  "tup  1  <  t  e  Know  j  edge  of  the  pilot's  ;>i  r  .  .-|.i  i.-n  *.f  the  environment.  bis  assessment  <  J 
the  viable  mission  op  t  1 1  -ns  .  .  •  r  his  t  tj ;  1  .  *  v  to  .  -  \  e.  1 1 »  n  j  s  m  ;  -  s  i  or,  .  h'-ia-s.  !  he  d*  mand'- 

•  f  this  appi  ;  »*.  .  >t-.s  •  *.  >wa  .  :-,  y-.-*  r.*  w  ■  ha  i  :  <  t-.ges  i  = .  tmih  the  .iv.ntiM  -  and  M  oiumu  n  M  1 - . 

Ihis  paper  p-  .ides  per-p.  --i  •  fc  .nd.-t  .  \  ;  *.g  •  •  ■  bn  ;  •  a  !  and  „st  ^  \  ar(;  .  < 

from  ongoing  ;  n  t «  i  i  i  ge  r.  ?  a-.  a-;  -y.  r  -  no  ,  r 

!  >;j  f  k  :  s  :  s :  i i  Phhsi ! ;  ;  r.y 


At  1  1  <  t  >  1  1  :  :  -it  ••  .  i  i  gen  •  u 
n  a  !  T  a  1  ,  if;gi.  Ige  j»j  •  ••  •-  s 

S  *1  r  scjeit  »  1  t  f,  |  e  T  r,.  ■  n  ;  t  '  ll 

a  •  fie  j  :  ,  o  t  at,-!  the  , ,  r  raft 
r  Ilia  t  i  a.  w  i  t  h  ;  f.  (  he  .  Ot  Kp  :  ' 


•Older  -  t  1 1 1  d  ;  » 


-.  tilt'd  -rates  KM:  tiiit:  it.  i  !  v  A  nit  nr  ii  .  ing.-ag*- 

iir  !  a  f  t  a •  ,  •  -■  .  *-  ■-  vb  t  --ii.  u-  I  •!  1  iri|  r  i -  v  <  . i r.d  '•  .  mp  .  '  ■ 

ic-tKp:!  'rnii  it.v.  at.  nt.-ig*  und" rs t and i eg  : 

n-e *gn  r  :  r  A  i  K  f  t  «•  r  ■  ■  and  kl  t  ik*  mi  ss  j  -••?-.  •  us; 
f  ad  a  t  .  irfMioi.  •  -  r  •  :■  '.  i  >  •  -t>'.  '.oil  A  -nor*  •  r 

<  , >. ,  s  %.  ,  >  ;  v  . i u  j  tig  •  «  !  •  i  r  r  1 1 :  f  r  a  t  ■  d  -  i  <\ s. . i  s  -  .  u  !  >  1  ■■ 

gr, ;  f  n.in!  -- 1  p- 1 . 1  l  •-  ati  :.*■  an  c.  ionics  sv«-',rn 


H\  far  the  broadest  area  of  pursuit  .*  s  the  .j|*|>)  n  at  n*n  •  ■  f  i\\<  ;  '  sy«-  !  en-*-  :•  d- 
gv  '  »-l.ar>ied  avion:-  s,  u,?h  svmt>"Si.i  su-  i,  is  V\pfi\  ,t  plk.  m..  I  t  i  j  ,e  s<-si  n-. 

.  '-fe  »•  x  amp  i  *•  is  he  F.xpert  N«iv;gat--r  .kef  ]  .  w(ii;h  ua»-  r  f>«-  sn-.iri  i  r  r  ■  *iu  wits  -  ft 

V  *  t  *  r-e  p*  r  spei  I  I  \  es  presented  in  th;s  paper  ••  re  derived  Although  the  '-.hr,ol«gv 

> •  -f.s  ;  ■  *  sen  fed  in  this  p-ape  r  a  r  e  ,-«  r  t  i  nr  n  t  t  •  .  t  hi  >t  hr  t  A  J  d  i  s.  :  [1  ;  n.-*-  .  ?  ha  d  i  -  - 

■  '  -  i-<  •  !  .  i  i  i  V  f ,u  used  •  ,n  f  tie  app  l  I  <  . ; t  j  on  *  -  f  i  >  pe  r  t  sysl  «-m  t  •  *  tin- .  i  -  -g\'  t  .  -  ad\  am  •  -j 

’  *•  •  •  •  nt  preoc  ■.  upat  j  on  with  I  [Sp  m-»*hines  and  ru  1  e  -  basc-d  'If-lh*n  expert 

-iic  •  ’ad  t  to-  unfortunate  «-f  fo  t  .  f  blurring  the  dist  metier,  t'e  X  w*.  en  A I  ar\<'.  :  ur.- 

|  ,  •  .  *  iti  s  •  i  v  i  r  i  g  p.ar  ad  l  gms  It  ;  s  not  1  he  I  f  -  1  hen  si  rm  lures  wh  i  .  h  set  ex  per  * 
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By  .  nju  r.ist  ,  A!  add? cssrs  *  he  problem  solving  process  .it  ,i  mote  t  und  •iin,,n  l  a  i 
level,  ti'ciisinj'  on  the  iiruii't'  1  v  i  ng  «.  .  .ns  t  ra  *  ti  l  s  ,  r'e ! -it  i  •  -nsli  i  ps  and  goals  whi*h  define  .in 
acceptable  solution  and  dictate  t  h  <  manner  in  whi  h  it  must  In-  t  «>rinu  l  it  ed .  ['Inis,  an 
expert  system  seeks  t  o  c-inu  1  -■»  t «-  t  he  planning  and  problem  solving  skill  <»t  the  designer- 
As  illustrated  in  Kir.  2 ,  the  knowledge  base  on  which  the  expert  system  reasons  en¬ 
compasses  t he  system  and  mission  constraints,  performance  and  mission  goals,  heuristic 
rules,  value  judgements,  and  procedures  parts  ie.g..  algorithms)  used  by  a  skilled 
problem  solver.  The  inference  engine  mtiM  i  lutes  a  lousing  mechanism  lor  applying  the 
knowledge'  base  to  the  system  data  in  order  to  postulate  and  examine  alternative  courses 
of  action,  and  select  the  course  best  suited  to  attaining  the  stated  goals.  [he  intended 
result  is  a  problem  solving  capability  which  is  extreme l v  robust  in  responding  to  un¬ 
anticipated  i  i  rcutnst  am  es  and  operating  *  « »n<J  i  lions. 


EXPERT  USER 


Figure  2 


Basi<-  Expert  Systems  Architecture 


An  expert  system  is  not  likely  io  follow  a  rigid  "recipe"  iti  1  ■  >rmu  1  at  1  rig  a 
solution.  Rather,  it  is  often  opportunistic,  using  incomplete  data  i<>  juts  it  plausible, 
but  as  yet  unproven,  solutions  and  then  accumulat ing  evidence  in  favor  of  (or  against  , 
the  strawman.  The  problem  of  efficiently  focusing  an  expert  system  on  the  most  produi - 
tive  line  of  reasoning  is  a  largely  unattained  research  objective,  with  the  most  •-tfec- 
t ive  search  strategy  generally  being  either  problem-  or  scenario- spev i fit  Regardless 
of  the  search  strategy  pursued,  however,  one  of  the  fundamental  traits  of  an  expert 
system  is  the  ability  to  explain  i t  s  _reason i ng  by  summarizing  the  evidence  supporting 
a  given  conclusion. 

Finally,  although  If-Then  rules  are  the  most  commonly  used  know  1  edge  repre¬ 
sentation  form,  other  representations  may  be  more  appropriate  to  a  given  appl it  at  ion. 
A  rule-based  system  is  very  easy  to  augment  with  additional  rules  and  is  well  adapted 
to  applications  involving  sequences  of  operations,  but  a  large  rule  set  can  be  diffi¬ 
cult  to  test  for  completeness  (Are  all  the  necessary  rules  there?)  and  can  result  in 
relatively  slow  operation  of  the  expert  system.  For  these  reasons,  frames  and  semant i c 
nets  (Fig.  3)  are  clearly  preferable  where  their  imposed  semantics  are  appropriate  I o 
the  problem. 


EXPERT  SYSTEM  TECHNOLOGY  ISSUES 

Development  of  an  intelligent  avionics  suite  poses  three  largely  unaddressed 
problem  areas  for  the  AI  research  community.  First,  the  expert  system  would  be  given 
at  least  partial  responsibi 1 i ty  for  mission-  or  1^  f e-cr  ij  i cal  decisions ,  and  thus  must 
be  virtually  infallible,  even  in  unanticipated  contingency  circumstances.  Second,  an 
intelligent  avionics  system  would  be  expected  to  function  within  rigid  time  constraints 
imposed  by  mission  and  aircraft  operations,  and  applications  such  as  flight  control  or 
threat  avoidance  could  require  response  in  fractions  of  a  second.  And,  finally,  an 
intelligent  avionics  system's  ultimate  goal  will  be  to  maximize  the  pilot's  offensive 
and  defensive  fighting  capability;  however,  the  pilot's  situation  awareness  and  perform 
ance  level  will  be  extremely  difficult  to  assess.  Thus,  the  expert  system  will  be  re¬ 
quired  to  function  with  an  incomplete,  and  possibly  erroneous,  j>et  of  priorities  and 
performance  goa 1 s . 


Figure  3  Knowledge  Representation  Forms 


These  three  new  problem  areas  can  be  translated  in’O  six  basic  technology  is¬ 
sues,  as  synopsized  in  Fig.  U .  The  relevance  of  each  issue  to  the  upplicat ion  of  Al  to 
avionics  problems  is  discussed  in  the  remainder  of  this  section. 

Real-time  AI  -  In  the  traditional  problem  sol v i ng  'parad i gm ,  an  expert  system 
accepts  status  information  from  the  external  world,  and  then  searches  for  all  possible 
explanations  in  order  to  find  the  best  solution  or  response.  Considering  threat  evasion 
as  an  example,  the  planning  action  required  is  to  search  for  a  sequence  of  actions  that 
will  lead  to  the  desired  resultant  state.  The  problem  is  that  while  this  planning  is 
taking  place,  the  state  of  the  system  is  changing,  ho  that  the  arrived-at  plan  may  no 
longer  be  applicable.  Similar  examples  could  be  drawn  from  flight  control  or  targeting 
app l i cat  ions . 
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Figure-  A  Key  Ifohntilojjifs  of  lnt  «*  1  1  i  gent  Avionic-.  svm  cii.s 


The  problem  statement  for  an  intelligent  avionics  system  loros  t  h<  expert 
system  to  reason  about  the  available  time  (or  simply  .io  ept  an  imposed  lime  omsl  r-nrit 
and  then  obtain  the  "best"  solution  consistent  with  the  available  time,  oniputer.  and 
v.'lot  interface  resources.  It  must  anticipate  the  future  state  of  the  system  based  .>n 

the  current  observations,  and  recognize  th.it  currently  valid  hypotheses  (e.g. .  t he  air¬ 
craft  can  evade  a  threat  SAM  radar  ; : lor  to  missile  firing)  mav  become  invalid  at  sow- 
future  time,  as  would  all  subsequent  conclusions  predicated  on  such  hypotheses  being 
true.  This  problem  is  referred  to  as  'truth  maintenance'.  Keccnt  releases  of  develop- 

TM  TM 

ment  tools  (e.g.,  KKK  and  ART  *  )  provide  a  truth  maintenance  capability:  hnwcvr  .  rh 
theory  behind  truth  maintenance  is  an  active  research  area  <  K  *  -  *  .  *  . 


One  obvious  consequence  of  real-time  operation  is  the-  necessity  of  r  •  as< -n  i t 
with  partial  or  incomplete  information.  In  addition  »o  the-  obvious  fa.  is  that  k<  v  event 
may  be  unobservable  (has  a  SAM  been  fired?)  or  not  re  laved  by  the  pilot  .  there  mav  not 
be  sufficient  time  to  process  the-  information  whi.h  i-  available.  ihis  requires  o, 
ability  to  focus  resources  on  important  goals  and  promising  lir.es  . t  e.is.»rnng .  without 
fully  searching  all  possible  actions  and  consequences. 

Techniques  for  reasoning  with  incomplete  information  genetallv  employ  a  priar; 
assignment  of  weighting  fact  rs  ( probab i 1 l t i es .  levels  of  belief,  confidence  fa.  tors 
for  the  antecedent  components  of  a  rule  and  use-  incoming  observations  t  evidence  uotig 
with  prescribed  rules  of  combination  t  <• .  g .  .  Haves'  rule)  to  increment  tllv  update  the 
likelihood  of  active  hypotheses  (Refs.  10  through  12'.  The  evidence  accrual  t*.  hniques 
being  pursued  by  (Hasson  (Ref.  2)  and  Green  (Ref.  a)  use  estimates  « •  t  the  incremental 
evidence*  attainable  along  altern.it  ive  search  paths  as  a  mechanism  for  truncating  i  ou  - 
payoff  search  sequences. 

Mission-critical  Software  -  I'he  knowledge  base  in  an  expert  system  isn't  stat¬ 
ic-.  As  new  facts  arc-  learned  through  the  inference-  process  or  through  l  r  i  a  1  -  and  -  <  r  t  . -r 
interactions  with  the-  external  world,  the  knowledge  contained  in  the  system  expands. 
Similarly,  the-  intereneing  sequence  pursued  by  an  opportunistic  expei t  system  is  not  ■ 
priori  predictable,  or  necessarily  repeatable,  for  a  given  set  of  initial  conditions. 
The  code  can  be  checked  for  fun.  t  ional  correctness,  and  the  expert  system  <  an  be*  >  \.  i  - 
cised  to  obtain  statist  ical  measures  of  completeness  of  the  knowledge-  base-,  corn.  tnc*-*. 
of  the  resulting  solution,  and  elapsed  time  for  reaching  a  decision.  However  .  a  .ompiet* 
or  stat  ist  ical  1  y  optimum  set  of  test  paths  cannot  be  dc-fmed  in  a  <  lassi.al  o  ns« 
Thus,  the  ultimate  measure  of  software  quality  is  likelv  to  he  "trustworthiness"  rat h>  t 
than  "correctness." 


('onvent ional  Algorithms  -  As  previously  mentioned,  the  inputs  provided  |>v  the 
pilot  art1  likely  to  provide  an  avionics  expert  system  with  in  incomplete  (or  urn  et  tain1 
perspective  on  the-  external  environment  and  the-  p  i  1  ot ,  a  i  tv  t  a  f  t  system  status.  further¬ 
more,  the  pilot's  attention  may  be  drawn  to  more  pressiug  matters,  making  his  implementa¬ 
tion  of  recommended  actions  unpredictable. 

A  partial  resolution  of  this  dilemma  lies  in  effective  interrogative*  and  control 
interfaces  between  the  avionics  expert  system  and  the  various  avionics  subsystems.  [In- 
procedure  set  which  embodies  the  expert  system's  external  world  interface  should  incor¬ 
porate  state-of-the-art  statistical  tests  anti  signal  processing  algorithm.:,  including 


^KEE  is  a  trademark 
TM 

ART  is  a  trademark 


of  1 n l e 1 1 i co rp . 
of  Inference  Corporation. 


model-based  fault  diagnosis  tests,  optimal  navigation  filters  and  control  algorithms, 
optimal  route  planners,  and  model-based  target  recognition  algorithms  for  exploiting  EW 
and  targeting  sensor  outputs.  In  essence,  to  be  effective,  an  avionics  expert  system 
must  have  at  its  disposal  the  best  possible  conventional  information  extraction  and 
planning  techniques. 

,  Pilot  Interface  -  The  traditional  avionics  concern  addresses  the  mechanics  of 
the  pilot  interface  --  the  display  technology  and  symbology  to  be  used,  the  viability 
of  voice  recognition  in  a  high  stress  environment,  etc.  Effective  pi  1 ot/av ion i cs  suite 
communicat ions  is  even  more  important  for  an  intelligent  avionics  system ,  however,  be¬ 
cause  of  the  need  for  two-way  information  exchange.  The  pilot  is  the  ultimate  source 
of  mission  priorities,  and  a  vital  source  of  status  and  situation  awareness  informa¬ 
tion.  As  a  consequence,  pilot,  attention  becomes  an  important  resource  for  an  expert 
system  to  manage. 

The  expert  system  must  be  able  to  ensure  that  high  priority  messages  (e.g  , 
recommended  evasive  maneuvers)  are  understood  by  the  pilot,  and  must  be  capable  of  pro¬ 
viding  a  broad  range  of  system  status  and  inference  explanatory  information  on  an  as- 
needed  basis.  It  must  be  able  to  attach  the  appropriate  priority  and  interpretation  to 
information  volunteered  by  the  pilot,  but  must  also  be  able  to  achieve  reasonable  sys¬ 
tem  goals  in  the  absence  of  pilot  data  inputs. 

Mission  success  is  a  joint  pilot/avionics  system  responsibility,  with 
lot  having  ultimate  authority.  In  essence,  an  intelligent  avionics  system  must 
level  of  decisionmaking  autonomy  appropriate  to  the  circumstances.  One  means  «.» 
plishing  this  would  be  to  estimate  pilot  workload  and  then  adapt  data  exchange 
omy  levels  accordingly.  Unfortunately,  there  are  no  reliable  metrics  for  in  si 
roent  of  pilot  workload  or  attention  level.  In  the  absence  of  such  metrics,  an 
avionics  system  would  have  to  resort  to  pi  lot -programmab 1 e  communication  priori 
which  would  be  accomplished  during  ground-based  mission  planning. 

Knowledge  Acquisition  -  Formal  operational  training  for  tactical  pilots  stresses 
reliance  on  simple  fundamentals  for  mission  execution.  As  an  example,  pilots  are  schooled 
heavily  in  navigation  using  only  a  compass  and  chronometer,  even  though  most  will  have 
access  to  a  variety  of  sophisticated  aided- inert ial  navigation  systems  during  their 
careers.  The  result  is  a  widely  varied  experience  base  among  operational  pilots,  with 
ad  hoc  rules  and  procedures  based  upon  personal  experience  forming  an  important  component 
of  each  pilot's  knowledge  base.  This  user-to-user  variability  invalidates  the  concept 
of  a  single  "correct"  knowledge  base  in  lieu  of  a  broader  knowledge  base  which  can  be 
tailored  to  the  specific  needs  of  individual  pilots.  The  knowledge  acquisition  problem 
is  particularly  acute  in  planning  for  future  avionics  systems  because  of  the  absence  of 
operational  domain  expertise  with  developmental  avionics  systems,  some  of  which  have 
not  even  been  flight  tested. 

Much  attention  has  been  focused  on  tools  for  acquisition  and  codification  of 
knowledge  --  KEE  and  ART  are  representive  of  the  current  state-of-the-art.  Nonetheless, 
extraction  of  relevant  knowledge  from  domain  experts  in  an  archi t ecture- independent  form 
represents  a  formidable  task.  Procedural  techniques,  such  as  partitioning  the  knowledge 
into  "chunks"  along  functional  or  domain  expertise  lines,  can  facilitate  the  process; 
however,  there  are  no  viable  methodologies  for  assessing  the  completeness  of  the  result¬ 
ing  data  base,  or  whether  or  not  the  functionality  is  appropriate  to  the  problem.  Simi¬ 
lar  to  the  problem  of  software  val idat ion ,  assessing  the  quality  of  the  knowledge  base 
is  largely  a  t rial -and-error  process. 

Distributed  Expert  Systems  -  The  new  supercomputing  architectures  stress  par¬ 
allel  computing,  a  trend  which  is  also  present  in  most  advanced  avionics  architectures. 
Because  of  the  potentially  substantial  computational  load  associated  with  most  non¬ 
trivial  expert  system  designs,  and  because  of  the  need  to  modularize  the  system  to  facil¬ 
itate  development  and  testing,  an  avionics  expert  system  is  likely  to  require  distributed 
(parallel)  processing. 

In  developing  an  expert  system  architecture  for  a  distributed  computing  envi¬ 
ronment,  the  principal  issues  of  interest  are: 

•  Pi s t r i butab i 1 i ty  -  Can  the  computation  and  inferencing  be  dis¬ 
tributed  to  the  available  processors  without  imposing  unreason¬ 
able  Lime  resource  constraints  or  excessive  control  overhead. 


t  he  p  i  - 
exert  a 
f  at  com - 
and  <iuton- 
tu  assess  - 
intelligent 
t izat ion  , 


Concurrency  -  Can  simultaneous  hypothesis  formulation  and  testing 
be  efficiently  implemented,  with  minimal  extraneous  searching  and 
acceptable  control  overhead. 


•  Focus  of  control  -  Can  t he 
focused  on  those  lines  of 
viable  solution. 


inferencing  process  be  effectively 
reasoning  most  likely  to  lead  to  a 


Real-time  operation  -  Will  the  architecture  support  timely  deci¬ 
sions  basea  on  incomplete  data. 
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•  Modulari ty  -  Will  the  proposed  system  niodu larizat ion  support  ef- 
ficient  design,  knowledge  acquisition,  software  development,  and 
testing . 

Current  applications  programs  are  focused  on  two  basic  architectural  options 
for  meeting  the  stated  requirements:  blackboard  architectures  and  communicating  archi¬ 
tectures  (fig-  5).  Both  employ  modular  expert  systems  (knowledge  sources  and  expert 
objects,  respectively),  each  module  reasoning  only  within  a  specified  doma i n .  The  pri¬ 
mary  differences  are  in  the  global  control  philosophy. 


Blackboard 


KNOWLEDGE 

SOURCES 


Communica t ing  Expert 


_pbjects 


Figure  5  Candidate  Architectures  for  Distributed  Expert  Systems 


A  blackboard  system  uses  a  scheduler  to  select  the  appropriate  sequence  of 
knowledge  source  invocations,  but  the  scheduler  can  be  both  inflexible  and  slow.  Com¬ 
municating  archi Lectures  provide  much  more  autonomy  for  the  expert  objects  and,  as  a 
consequence,  can  be  much  more  opportunistic  in  pursuing  promising  lines  of  reasoning. 
However,  weak  evidence  can  potentially  lead  to  high  message  volumes  and  inconclusive 
searches.  Both  architectures  have  achieved  impressive  successes  (Kefs.  6  through  8), 
but  both  require  considerable  skill  to  effectively  implement. 

SUMMARY 

The  function  of  an  intelligent  avionics  system  should  be  to  perform  pi  lot  - 
delegated,  mission-critical  functions.  Since  the  pilot  must  bear  ultimate  responsibility 
for  mission  success  and  safety,  the  role  of  an  expert  system  would  be  to  recommend  in¬ 
telligent  options  for  system  management  and  mission  plan.- ing,  and  to  exercise  the  level 
of  autonomy  conferred  by  the  pilot  in  imp  1 emen t i ng  those  options.  In  performing  this 
role,  the  expert  system  could  use  a  combination  of  heuristics  (pilot  goals  and  beliefs) 
and  mathematical  procedures  (signal  processing  algorithms,  decision  models  and  strategy 
generators,  etc.)  in  responding  to  unforeseen  contingencies. 

It  seems  readily  apparent  that  intelligent  avionics  have  the  potential  for 
improving  aircraft  performance  and  mission- respons iveness ,  while  decreasing  pilot  work¬ 
load.  Because  avionics  perform  a  real-time,  mission-critical  function,  however,  full 
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exploitation  of  the  promise  of  AI  wi 1 1  require  substantial  advances  in  a  number  of  cri¬ 
tical  technology  areas.  The  DoD  is  currently  pursuing  a  number  of  program  initiatives 
with  the  objective  of  demonstrating  the  applicability  of  Al  to  the  avionics  problem. 
These  initiatives  will  contribute  substantially  to  the  state-of-the-art  in  Al  appli¬ 
cations;  however,  solutions  to  several  of  the  pertinent  technology  issues  are  likely  to 
require  contributions  from  the  broader  AI  research  community. 
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[NTKOOUCT  ION 


If  technological  progress  is  very  rapidly  Increasing  the  capacity  of  elect  r.»n  Ic  .  ir  .iit-i,  u.  r 
other  hand  Che  difficulty  of  establishing  diagnoses  in  the  event  >t  u  1  r  .met  ion  l  .  increasing  i..rc 

quickly . 


Repair  time  bears  directly  on  the  availability  of  an  eqjipne.it  tnJ  its  cost  >t  nai  u**nave.  re¬ 
pair  operation  may  be  divided  Into  the  following  three  distinct  phases  : 

-  Test  :  detection  of  the  fault  condition 


“  Diagnosis  :  local  izatlon  of  the  f  ault 


-  Repair  :  return  to  a  normal  serviceable  condition. 


The  first  and  third  of  these  phases  are  -nnenahle  to  svste.nati  procedures.  rhe  »nd  ;»i.jse, 

ever,  requires  not  only  in-depth  knowledge  of  the  equipment  to  be  repaired  but  »!•;>  o  I :  s  ipj  1  i  -it  i  , 

since  a  defective  part  may  induce  malfunction  of  other  elements  :  how  cm  one  be  sur«*  ■>»  t  ic  ser  j  l .  **.|M  1  i  r  .• 

of  an  engine  starter  if  the  car  battery  Is  low  ?  This  simple  example  points  t>  tie  dl  •  *  i.  oily  d 

tlcs  in  the  case  of  a  highly  complex  electronic  circuit  In  which  Interaction  1 ,«  it  i  very  high  level. 

It  is  necessary  to  distinguish  two  broad  types  of  circuit 

a)  Digital  circuits  which  are  amenable  to  troubleshoot  i  og  a  1  •  >r  i  t  hms  :  *ar  na.it  »■  test  ;  u  i  a..  :j 
has  been  used  by  the  Industry  for  <iaiiy  years  for  this  type  of  circuit. 


b)  Analog  circuits  which  are  very  difficult  to  describe,  ospe.ltllv  outside  or  t  uur  i  ■ « r  -i  *  ’  'n,;.-, 
of  operation.  At  the  present  time,  troubleshooting  is  pert  armed  by  highly  qualified 
technicians.  This  dependence  >n  such  specialists,  little  motivated  by  tul-»  •.  i  id  ••  wort,  i  ■* 
without  problem.  Such  persons  ire  not  numerous  and  therefore  cannot  be  clo->e  t  .  « 1  >  eju!pn<*:r 
In  service.  Moreover,  tiielr  dlsslon  ends  rather  quickly  in  the  li’e  ot  equipment  i  i  . r  »t  i  •  , 
since  they  are  then  assigned  to  a  new  equipment. 


Automation,  i.e.  computer  processing,  of  analog  circuit  troubleshooting  is  thus  i  cr-nlal 
r-qu  l  rement . 


Conventional  data  processing  does  not  offer  a  satisfactory  response  to  this  requirement.  In  par¬ 
ticular,  ic  comes  up  against  the  difficulty  of  quantifying  information  to  be  processed  and  •»  1  , ...  against  <•.*> 
continuum  of  fault  conditions.  Ic  Is  necessary  to  be  capable  of  reasoning  on  a  fault  >f t en  appraiiuy  ‘  >r 
the  first  time.  Artificial  intelligence  attempts  to  provide  this  ability  of  adaptation  to  out  •■»resee  iMe  si¬ 
tuations,  otherwise  a  major  weakness  of  conventional  data  processing. 

Among  artificial  intelligence  techniques,  those  of  expert  systems  (E.S.)  would  appear  to  be  those 
immediately  applicable  In  an  Industrial  environment.  A  particularly  convenient  feature  of  " . S .  is  lndepei- 
dence  between  the  representation  and  exploitation  of  knowledge.  Another  interesting  char.tc  t  er  1  s  t  i  c  .if  v.h. 
due  to  their  declarative  programming,  is  their  ease  of  modification.  They  apply  indeed  to  tress  where  ten  >w- 
ledge  Is  poorly  formalized  and  therefore  never  completely  analyzed  at  the  sti't  <*f  a  project.  In  parti¬ 
cular,  experience  is  handed  down  only  progressively  through  the  analysis  of  system  failures. 

DEDALF.  is  m  F.S.  developed  by  Elect ronique  Serge  DASSAULT,  the  objective  of  which  is  to  <  over  the 
diagnostic  phase  of  an  analog  circuit. 

DEDALE  allows  the  fast  jnd  intelligent  identification  of  circuit  faults.  Its  abilltv  ts  not  limi¬ 
ted  to  a  few  circuits  ;  it  is  able  to  trouhLeshoot  fairly  quickly  any  new  circuit  with  minimum  initial 
knowledge.  The  novelty  of  DEDALE  compared  with  other  E.S.  largely  results  from  this  objective. 

The  procedure  adopted  by  DEDALE  in  producing  diagnoses  is  comparable  with  that  of  an  export  faced 
with  the  same  situation.  Both  apply  very  general  knowledge  born  of  experience  (expertise)  to  a  sltiation 
they  discover,  one  by  deans  of  a  structural  and  functional  description  of  the  defective  circuit  and  the 
other  by  means  of  a  circuit  diagram  and  Layout  drawing,  a  parts  list  and  information  resulting  from  elec¬ 
trical  tests.  The  system,  no  more  than  the  expert,  is  incapable  of  Identifying  a  fault  without  additional 
information.  A  troubleshooter  is  able  to  use  test  and  stimulation  equipment  in  addition  to  his  five  senses. 
DEDALE  must  therefore  make  use  of  Che  troubleshooter’s  competence  for  completing  or  supplementing  Its 
information.  This  constraint,  which  manifests  Itself  by  dialoguing  throughout  the  repair  work,  has  heavy 
consequences.  It  implies  an  effort  to  limit  the  number  of  information  resquests  and  to  monitor  their 


DEDALF  has  been  designed  la  collaboration  with  the  Scientific  Centre  of  I'lH  FRA.',!|>  ■  Initial  m<*.*- 
tings  between  technicians  took  place  In  1981  and  were  officialized  by  i  reset  r,n  signed  it  t'»e 

beginning  of  1985. 

The  study  resulted  in  the  production  of  an  raper  l-aent  a  1  -node  1  which  w«s  1*»'Hinni  r  ti  e  i  i  i  the  or 
ae  of  1985 . 

Ot AFTER  1  -  TDK  KNOWLEDGE 


The  computer  sode  1 1 1  zat  Ion  and  representation  of  knowledge  useful  -  ir  repairing  i  »!  >■ 
circuits  appeared  to  he  the  moat  crucial  and  co.aplex  phases  of  IJEUAl.F.  deve  lopment  .  It  w»ul1  ippf 
this  which  characterizes  software  of  the  K.S.  type  compared  with  mure  ••.juvumi  I  mu  i  .  itt  ware  i  .r 
representat ion  of  Information  raises  in  general  few  problems. 


l.l  CIRCUIT  KNOWLKIm.F 

This  knowledge  relates  to  the  structural  an  I  functional  isj>ects  of  a  circuit  m  which  di  »;/;  ii 
are  based.  (l|  [)] 

Basic  electronic  concepts,  general  for  all  circuits,  enable  i  particular  •  ir  uit  t  he  bar  ». 
zed  and  referenced.  Their  Internal  structures  are  adapted  to  effective  ose  during  dt  ag-ms  t  1 -s .  The  or.* 
method  adopted  for  organizing  and  controlling  this  inf  orma  t  ton  ("frames")  highlights  the  h  1  e  r  i  r  ,*h  j  ,•  ,  J 
relational  aspect  <»f  a  fact  within  a  context.  Implement  it  ion  using  object  oriented  languages  l  s  per  fee 
conceivable.  Each  circuit  is  the  subject  of  a  dual  description  :  structural  and  1 unct Iona  1 • 


1.1.1  Structural  Description 

The  structural  description  attempts  to  reproduce  tn  DKDAl.f  all  hhm.it  l  io  os>**il  * 
ting  obtained  by  visual  observation  of  the  circuit  or  Us  laymut  Iriwlng. 

It  is  used  for  refining  a  diagnosis  by  use  of  spatial  concepts  (location,  dlmenil  •> 
or  technological  concepts  (nature  of  connections,  components)  and  alas  for  Identifying  ph.-si 
at  which  tests  must  he  performed.  This  Identification,  which  appears  i»  the  is.*r  »f  i 

graphical  view,  Is  a  first  step  towards  complete  automation  of  the  pr-nesx. 

The  fol  lowing  various  structural  concepts  have  been  adopt  e>l  : 

-  s  t  roc  tural__b  lock  :  a  st  ruct  ura  l_b  lock  Is  a  physical  entity  identified  hv  It-  l>.atl*.r*  an  1 

Its  technology,  hy  test  points  and  hy  an  Internal  uio>tiru)  hr  <•  »»-  .1  u . 

-  atom  :  this  is  t  struct  ural  block  for  which  further  st  ru.  tori)  break.)  »wi  is  >J 

interest  for  diagnostics.  Consequent  1  y ,  It  Is  the  smallest  ni  i'v  wtit«  h 
ted  in  a  c tse  of  aa  1  f unct Ion. 

An  atom  must  possess  electronic  behaviour  known  to  DKDAI  !•  ,  t  .*>.  oust 
function  (refer  to  I  1.1.2). 


.  U  r  >s  1  n  1 1  v 
»l  local  | 


-  Internal  node 


this  Is  a  physical  entity  combining  techno  I  og|  c  ■%  1  ly  humogeu 
structural  block. 


-  link  this  is  an  atom  having  the  special  function  of  electrical  >  onnec  r  t  on,  The  opt  I 

of  normal  operation  of  the  electronical  nodes  it  a  dr.  nit  is  in  geaeril  j.»t  klv  i,i- 
oltted  In  the  course  >f  troubleshooting,  since  It  enables  \  f am r tonal  'toll  t<  be 
identified  very  rapidly.  It  is  for  this  reason  that  ItiVs  tad  I  it  erua  l_node-,  ire  (is 
tingulahed  from  atoms  and  st rue t ura l _ b  1 ocks . 

-  test  j>olnt  t  physical  locat  Ion  at  which  an  observation  of  any  nature  m  v  be  env  1;  i.;**  » . 

Example  :  measurement  of  a  voltage. 

The  test  _potnt  Is  generally  located  In  an  Internal  nod**  >f  the  •  t  r .  .  ■  t  t  . 

Structural  blocks  and  Internal  .lodes  enable  the  circuit  to  be  descr.hed  in  the  f  »rm  -•<  i  M^rir. 
of  structural  entitles.  The  circuit  represents  the  structural  block  at  the  highest  level,  wM  1.*  the  il  u 
Is  that  of  the  lowest  level.  The  character!*! t > s  of  each  entity  ire  defined  In  i  spatial  relereure  t  r  cue . 

The  size  of  a  block  Is  given  by  the  lenr.lh  and  width  <>r  the  re<taneK-  lo  wld.h  the  hi  ok  t. 


1.1.2  Functional  Description 

The  functional  description  of  i  circuit  reproduces  In  DeoAI.F  a  eon vent  1  *ma  1 
the  cl rcult . 


c  t  1  *>na  1  ana  l  vs  I  s  >i 


..  -  >  • 
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operation  does  not  indicate  the  causes  of  failure.  Rules  of  >oa  1  f  jnc •  \ on  an  then  rapidly  guide  diagnosis  by 
Indicating  these  causes  which  may  be  later  used  by  the  rules  of  experience. 

It  is  also  possible  to  use  the  rules  of  malfunction  directly  11  •••■theses  concerning  malfamtlou 
are  provided. 

Example  :  If  the  actual  measured  frequency  of  an  oscillator  is  a  multiple  of  Its  normal  frequency, 
the  oscillator  is  defective  and  presents  the  problem  of  being  locked  onto  a  harmonic. 

1.2.4  Rules  of  Selection 

The  rules  of  selection  (meta-rales)  participate  In  formulating  a  strategy  for  t  roub l e  shoot l ng  a 
circuit.  This  knowledge  Is  thus  located  at  a  less  specific  level  of  the  expertise  domain  (example  :  to 
privilege  the  validation  of  a  hypothesis  relating  to  a  suhfunctlon  of  a  function  confirmed  as  defective). 

The  rules  of  selection  allow  faster  progression  in  the  process  of  diagnosis  by  giving  preference 
to  hypotheses  likely  to  prove  taore  fruitful. 

1.2.5  "g<*  of  Knowledge  of  the  Inferential  Type 

The  rules  of  operation  and  malfunction  derive  frou  interpretation  of  the  laws  of  electronics.  They 
are  easily  acquired  and  little  subject  to  modification  other  than  their  enriching. 

The  rules  of  experience  correspond  to  the  synthesis  of  situations  experienced  by  repairmen.  They 
are  wore  difficult  to  acquire  and  are  never  exhaustive. 

The  riles  of  selection  describe  methods  of  diagnosis.  They  vary  from  one  expert  to  another  and  may 
be  con  r-nl  iriory .  They  must  therefore  always  be  challenged  during  development. 

In  addition,  DKUALr.  uses  a  mode  of  non-mono  tonic  reasoning,  l.e.  a  rule  nay  he  challenged  follo¬ 
wing  Its  application. 

1  . l.h  Specific  Programs 

There  Is  certain  knowledge  relating  to  circuit  troubleshooting,  the  nature  and  use  of  which  allow  a 
very  oiWvnt  l>na  l  1it.»-pro«:esslng  description  of  the  algtrllhm  type. 

O  Analysts  of  Electrical  Interaction  Between  Functions 

The  analysis  jf  electrical  Interactions  Is  based  on  the  following  simple  idea  :  one  function  in 
general  influences  the  oper.it  Ion  of  mother  function  1 f  there  Is  a  possible  electrical  path  bet¬ 
ween  them  (It  being  possible  to  envisage  other  cases,  such  as  thermo-electric,  Inductive  and  me¬ 
chanic  i  l  effects,  etc). 

This  .analysis  It  used  above  ill  hv  the  rules  of  selection  In  order  to  limit  the  area  of  search. 

Example  :  If  i  function  of  the  circuit  Is  not  performed,  'hen  consider  only  those  hypotheses  rela¬ 
ting  to  lunct loos  affecting  the  former. 

b)  Analysis  of  Priorities 

\  degree  of  priority  expresses  the  doubt  generally  assigned  to  a  structural  element,  block  or  atom 
concerning  Its  electronic  performance.  Doubt  .acquired  by  experience  with  regard  to  a  structural 
element  does  not  take  Into  account  any  special  c  l  rcuuist  ances  having  produced  It.  This  knowledge 
may  therefore  be  used  whatever  the  troubleshooting  In  progress. 

The  analysis  of  priorities  and  the  analysis  of  Interactions  provide  tine  input  data  for  the  rules 
of  selection. 

c)  Electrical  Fa ra meters 

1/hen  they  are  not  measured  directly,  electrical  parameters  may  be  calculated  or  deduced.  Knowledge 
of  ther  is  essential  for  determining  whether  or  not  an  electronic  function  Is  normal. 

Electrical  voltage  Is  an  electrical  parameter  associated  with  the  node  entity  considered  as  opera¬ 
ting  normally.  \  voltage  measurement  made  on  a  physical  point  of  a  node  Is  sufficient  for  determi¬ 
ning  the  voltage  .,f  t*>ls  node.  This  may  also  be  determined  by  applying  Klrchoff's  Law  relating  to 

voltages.  DEUALR  attempts  to  apply  this  law  systemat leal ly  to  avoid  making  unnecessary 
measu  reaents . 

The  parameter  of  electrical  current  Is  a  special  case,  since  it  l  /  a  practically  unmeasurable 
quantity  possessing  rather  the  characteristics  of  a  quantitative  synthesis  nf  cons  1  derat  Ions  rela¬ 
ting  to  the  operation  and  interaction  of  functions. 

The  solution  to  this  problem  constitutes  part  of  future  DKDALF.  development.  At  the  present  time, 
OKDALR  assumes  it  Is  possible  to  measure  current  and  to  apply  Klrchoff's  Law  relating  to  currents. 

A  program  determines  the  value  of  an  output  current  for  a  given  function  and  node  from  the  values 
of  output  currents  for  other  functions  and  for  the  node  considered. 


CHAPTER  2 


A  DEDALE  SESSION 


A  session  of  circuit  troubleshooting  by  DEDALF  is  executed  as  follows  : 

2.1  ACQUISITION  OF  DATA  DESCRIBING  THE.  CIRCUIT  TO  BE  TESTED 

These  data,  both  structural  and  functional,  are  provided  In  a  precise  syntax  reflecting  their  hie¬ 
rarchical  character.  Special  care  has  been  taken  t*»  facilitate  future  extensions  of  this  syntax. 

A  Prolog  progf tra  immediately  translates  these  data  hy  creating  instances  nf  prototype  frames  rela¬ 
ting  to  the  description  ol  a  general  circuit.  Following  this  phase,  the  svste-n  thus  possesses  the  strut  i- 
ral  and  functional  data  of  the  circuit  to  be  tested  in  a  form  directly  usable  hv  the  system. 

2.2  ACQUISITION  OF  QUALITATIVE  DATA  CONCERNING  MALFUNCTION 

These  are  relating  t<*  the  defective  nature  of  the  circuit  -is  shown  hy  the  tit  mantle  test  procedu¬ 
re**  as  follows  : 

-  The  list  ol  output  signals  which  differ  from  those  expected  in  the  case  of  normal  uper tiiou. 

The  system  then  performs  an  Interaction  analysis  to  determine  the  higher-level  functions  t  ■  he 
suspected  according  to  the  interaction  they  have  on  the  circuit  outputs. 

-  If  possible,  the  types  of  qualitative  fault  observed  on  these  outputs  (signal  absent,  incorrect 
frequency,  low  voltage,  etc.)  or  at  the  level  of  the  circuit  Itself  (excessive  power  consu.np- 
tion,  etc.).  These  data  are  used  hy  the  rules  of  experience. 

At  the  present  time,  these  data  are  enterred  via  the  console  by  the  operator  In  reply  to  questions 
asked  hy  the  system.  They  could  be  entered  directly  by  means  of  an  Interface  between  the  system  arj  test 
procedures.  This  Is  also  the  case  for  all  data  to  he  supplied  later  (mainly  the  results  of  voltage 
measurement),  the  acquisition  of  which  will  he  automated  in  t lie  future. 

Given  these  preliminary  data  for  guiding  Its  diagnosis  (in  the  absence  of  such  data  the  systen 
operates  blindly  by  Investigating  all  functions),  the  system  starts  t lie  actual  reasoning  (troubleshooting) 
phase. 


2.1  TROUBLESHOOTING 

The  Initiation  of  troubleshooting  Is  the  only  procedural  part  (2  lines  of  code  !)  of  DEUALr.. 
Troubleshooting  itself  is  performed  according  to  the  following  cycle. 

2.3.1  Application  of  Rules  of  Experience 

All  the  rules  of  experience  are  examined  in  the  forward  chaining  mode  until  saturation  of  the  cur¬ 
rent  fact  base.  They  determine  now  possible  hypotheses  (Including  in  particular  in-depth  exploration  of  i 
suspected  function)  resulting  from  the  fault  symptoms  observed  or  deduced  hy  the  system  in  the  course  of 
former  cycles  (the  symptoms  being  provided  as  data  during  the  ftrst  cycle). 

These  hypotheses  relating  c<>  functions  nay  be  associated  with  probable  causes  of  malfunction,  e.g. 
hypotheses  (capacitor  ((N5,  \'8  j  ) ,  23,  short-circuit). 

2.3.2  Application  of  Rules  of  Selection 

The  system  then  activates  la  the  Sack-chai ni ng  mode  the  rules  of  selection  for  the  purpose  of 
determining  among  all  the  hypotheses  of  previous  cycles  remaining  to  be  examined  that  which  the  system  will 
attempt  to  validate  during  this  cycle.  In  the  absence  of  remaining  hypotheses,  the  rules  select  from  the 
circuit  functions  not  yet  validated.  This  avoids  an  excessively  rigid  in-depth  search  strategy. 

2.3.3  Validation 

Validation  of  the  selected  hypothesis  Is  based  on  the  rules  of  validation  activated  in  the  back- 
chaining  mode.  These  rales  are  conceptually  similar  to  those  of  select  Inn  (since  It  Is  a  question  of  selec¬ 
ting  the  method  of  validation)  and  Involve  the  rules  of  operation  and  the  rules  of  malfunction  also  used  i  i 
the  hack-chaining  mode. 

Thus  if  the  Selected  hypothesis  defines  a  case  of  i.ial*  met  Ion  «> f  i  function  by  tueans  >>f  the  rules 
of  experience,  the  system  .mist  it  tempt  to  confirm  definitively  this  malfunction  by  using  the  associated  ri¬ 
les  or,  If  this  Is  not  possible,  must  try  to  show  that  the  function  Is  correct.  If  the  hypothesis  expresses 
doubt  regarding  a  function  without  defining  the  cause,  the  system  acts  In  the  opposite  direction,  attemp¬ 
ting  firstly  to  conflrn  correct  oper.it  Ion  of  the  function  before  considering  its  possible  .an  1  f  jno  t  l  on . 

The  validation  result  Is  conserved  (function  recognized  as  correct  or  Incorrect  or  validation  at¬ 
tempt  failure,  l.e.  doubt  •  >ocerifo.«  rhe  behaviour  of  Lite  function).  It  is  used  in  subsequent  cycles  (riles 
of  experience)  as  are  any  faults  confirmed  or  delected  by  the  riles  •->*■  malfunction,  e.g.  fault  (collector 
base_Junrt  to n_open_cl  real  t,  TO). 


2.1.4  Processing  of  the  Validation  Result 
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The  program  reinitiates  the  troubleshooting  cycle.  The  data  acquired  during  the  previous  cycle  art- 
then  used  hy  the  rules  of  experience. 

The  various  stages  of  reasoning  used  by  the  rules  (hypotheses  concerning  the  functions  and  possi¬ 
ble  causes,  validation  or  invalidation  of  a  function,  normal  or  abnormal  operation  of  a  function,  type  of 
fault)  are  recorded  in  a  current  fact  base  continuously  updated  by  the  rules  (additions  or  removals)  while 
Information  acquired  as  a  result  of  measurements  (voltages)  and  considered  as  definitive  are  store  in  the 
f  rames. 

2.4  END  OK  DIAGNOSIS 

This  occurs  : 

“  either  at  the  start  of  a  cycle  when  a  rule  of  experience  indicates  chat  a  defective  atom  or  link 
has  been  found  by  a  rule  of  malfunction  during  the  previous  cycle,  the  fault  then  being 
identified, 

-  or  at  the  moment  of  selection  when  all  the  functions  of  the  circuit  have  already  been  subjected 
to  the  validation  phase,  in  which  case  the  system  has  failed  to  identify  the  fault  and  can  at 
the  most  propose  the  changing  of  non-valldated  atoms. 

2 .  *>  TRACE  AND  INTERFACE 

A  graphical  interface  (under  ISM  GDDM  system)  displays  all  or  part  (zoom)  of  the  circuit  to  be 

tested . 


Heneath  the  graphical  field  In  which  the  circuit  diagram  appears,  there  are  two  alphanumerical 
fields  for  system  requests  and  user  replies. 

When  a  test _j>olnt  measurement  Is  requested  in  the  first  of  these  fields,  this  test_point  flashes 
in  the  diagram,  enabling  it  to  be  easy  recognized. 

The  execution  of  reasoning  nay  be  followed  graphically  by  nenns  of  a  colour  code  controlled  by  the 
files,  identifying  at  each  cycle,  the  hypotheses  generated  by  the  rules  of  experience  and  then  the  attempt 
to  validate  operation  or  malfunction  of  the  selected  function. 

Each  time  Information  is  eucered  via  the  keyboard,  the  trace  node  -nay  be  selected  (or  abandoned) 
at  will  for  showing  execution  of  the  rules  (see  §  1.2).  In  any  case,  a  complete  trace  of  questions, 
and  rule  activations  is  available  in  files  at  the  end  of  the  session. 


answers 


V. 
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CHAPTER  1  -  THE  KNOWLEDGE  REPRESENTATION 


In  DEDALE  knowledge  Is  represented  In  the  form  of  frames  and  roles. 

3.1  FRAMES 

3.1.1  Description 

Frames  are  used  here  for  describing  the  factual  knowledge  of  a  circuit  (another  possibility  would 
consist  in  formulating  them  In  object-oriented  language). 


The  conventional  representation  In  frames  Is  given  in  the  form  of  quads 
<  object,  attribute,  facet,  value  >. 

I  From  the  semantic  point  of  view.  It  Is  possible  to  distinguish  : 

i  -  the  models  which  are  special  frames  representing  concepts,  assembling  here  the  knowledge  on  an 

{  electronic  circuit  In  general  (valid  for  all  troubleshooting) 

,  -  the  Instances  which  are  precise  objects  materializing  a  concept,  here  the  knowledge  relative  to 

1  the  particular  circuit  under  test. 

The  attribute  plays  a  special  role  :  the  ISA  link  connecting  a  model  to  a  more  general  model  t 
connecting  an  Instance  to  a  model.  This  hierarchical  link  automatically  Implies  heritage  of  the  values  of 
the  attributes  of  a  model  by  Its  descendants.  Thus  a  graph  is  obtained,  the  leaves  of  which  are  instances. 

3.1.2  Attributes 

Here  are  examples  of  attributes  together  with  the  highest-level  object  where  they  are  defined. 

Object  :  any  (represents  any  attribute)  ;  priority  (a  priori  vulnerability  coefficient) 

Structure  :  reference(s)  with  respect  to  a  local  reference  frame  ;  form  ;  dimensions; 

structural_type  ;  test_polnts  ;  technology 

Slock  :  composition  (In  blocks  or  atoms) 

Internal_jiode  :  composition  (In  lnternal_nodea  or  links) 

Circuit  :  def ect lve^_lnputs  ;  defective  outputs 

Test__polnt  :  po9itlon(s)  (with  respect  to  a  local  reference  frame)  ;  voltage  (potential  difference 

(pd)  with  respect  to  a  ground  reference  test _point)  ;  pd(T)  (potential  difference  with 
respect  to  test_polnt  T)  ;  AC__voltage  :  AC_pd(T) 

Node  :  composition  (in  internal^nodes )  ;  test __point 

Function  :  S'jb_funct  ions  ;  funct  ional_type  (e.R.  the  name  of  the  function  without  its  parameters) 

Active_block  :  teraperature__compensat ion 

Resistor,  Inductor,  etc.  :  tolerance 

Diode  :  maximum  current  ;  maxtmu<n_reverse_volcage,  etc. 


It  should  be  noted  that  the  attributes,  In  the  same  way  as  the  objects,  may  consist  of  a  name  or  a 
name  with  associated  parameters  (Prolog  predicate). 

Many  of  these  attributes,  attached,  as  shown  above,  to  rhelr  conceptual  entitles,  are  In  fact  used 
only  at  the  level  of  Instances  and  receive  their  values  at  the  time  of  data  acquisition  on  the  circuit. 
Others  (voltage,  pd(T))  are  used  in  the  course  of  troubleshooting  under  their  procedural  attachment  aspect 
(facet  lf_needed). 

3.1.3  Facets 

Contrary  to  domain-specific  attributes,  facets  are  more  less  univ  ,-rsal  in  the  f  raae  represent  .i- 

t  Ion. 

-  Value  Facets 

Facets  Intended  for  receiving  the  value  or  values  of  an  attribute  (these  values  generally  being 
objects,  Prolog  atoms,  numbers  or  character  strings)  :  VAL  and  DEFAULT  (Implicit  information  to 
be  taken  Into  account  If  there  is  nothing  in  VAL). 

-  Filter  Facets 


I 


Filter  facets,  which  are  constraints  on  allowed  values  of  an  attribute  as  well  as  filtering  to 
the  methods  of  searching  for  these  values  : 


.  DOHA  IS  spe*- 1  f  l*s  the  domain  if  attribute  value  definition  : 

*  This  Domain  -»ay  he  described  expl  i.-u  ly ,  e.g.  as  a  list  of  at  t  ties  : 

<c  apac  1 1  y ,  technology  ,  liiuialn,  J  polarized,  unpul a r  t  eed  j  ^  or  'icurtMl  interval 
tolerance,  domain,  ^«iw««n  (1,  l'lj>. 

*  It  nay  be  described  by  using  the  object  is  variable  ;  it  Is  then  calculated  when  the  object 

Is  lostaic l at e*l  :  e.g.  {circuit,  detective  outputs,  domain,  outpits  (self,  domain)},  in 

which  outputs  (seif,  domain)  is  a  program  producing  the  list  of  outputs  (Hoiaaln)  of  the  ini¬ 
tial  object  self. 

*  It  nay  be  described  Implicitly  as  all  tiie  values  mnfirnlng  this  prjperty  V  P(V)  .  It  Is 

then  not  calculated  in  advance  but  any  proposed  value  Is  accepted  only  if  it  ronflms  the  pro¬ 

perty  :  e.g.  {object,  priority,  domain,  lnt**ger(V)>  to  indicate  that  the  priority  must  he  inte¬ 
ger. 


*  finally,  the  domain  nay  have  the  names  of  frames  as  value  (see  exclusive  choice  below). 

.  TYPE  can  ass  me  the  following  three  assignments  : 

*  Single-valued  when  the  value  of  the  attribute  Is  single,  which  may  he  of  the  list  type  .is  li 
{node,  test  point  list,  TYPE,  single-valued} 

{node,  test_j>olnt  list,  VAL,  (Tl ,  TS ,  T7]>. 

The  si ngle-vu 1 ued  chancier  of  un  attribute  implies  restrictions  when  searching  fur  a  value 
(stop  on  the  first  value  found)  us  well  as  for  adding  a  value  (error  as  soon  as  a  different 
value  oxlats).  This  Is  the  type  by  far  the  most  ised  la  JKIMLE. 

*  Multi-valued  when  the  attribute  can  have  several  values,  provided  they  belong  t  >  the  domain 
e.g.  :  <node,  test  __ point,  TYPE,  mu  1 1  l_j va  lucd> 

{node,  test_point_ll st ,  V\l,  (Tl ,  T2 ,  T3)> 

*  Kxclusl ve^jcholce  when  the  attribute  can  have  several  values  divided  iit«»  classes  with  -in  ex¬ 
clusive  character  within  each  clans. 

.  PRfijCOtlDrridN  acts  as  a  filter  In  the  search  for  a  value  of  the  attribute.  Its  value  i.  an  ac¬ 
tion  (representing  conditions  to  he  satisfied)  which  will  be  executed  before  ictivaliun  of  in 
reflex  tf^needod  found  higher  In  the  1  v\  hierarchy.  This  facet  Is  for  future  extensions. 

Reflex  Facets 

Reflex  facets  constitute  the  active  part  of  frames  under  which  ar*  st  >cxcf<i  pr  u  edura  1  Iwiv le  Ige , 
the  Initiation  lit  cascade  of  which  may  be  considered  as  basic  reasoning  within  rh«  frames. 

.  IF^NEKDEL)  :  this  reflex,  the  value  of  which  Is  any  action,  is  initiated  when  searching  for  a 
value  of  an  attribute  (when  there  Is  nothing  under  facet  VAL). 
e.g.  :  {t»3t_j>olnt ,  pd(T),  l >'__NEK.i)Kf) , 

nd  calculation  (sel*,tfV) 

If  not  request  (self ,pd(t),V)} 

Self  Indicates  the  initial  object  of  Interest  (in  this  case  a  particular  test  point),  V  is  the 
value  sought  (here  the  pd  of  the  test__polnt  considered  with  respect  to  test^jjolnt  f),  nd  cla- 
culatlon  If  for  example  a  Prolog  program  calculating  the  potential  difference  between  two 
test^points,  'request'  is  a  frame  utility  function  used  for  questioning  the  operator  l  a  or  J«»r 
to  obtain  a  value  of  an  attribute  or  object. 

.  IF__ADDEU  :  the  value  of  this  reflex  Is  any  action  Initiated  when  adding  a  value  (under  facet 
VaL)  to  an  attribute  :  e.g.  <r.estj point ,  pd(c  )  ,  Tg_Al>f>El>,  put  <t ,  od(  sel  f  )  ,  V  \L,-V» ,  put  being  a 
frame  utility  function  filling  an  object  attrib.it**  facet  with  a  given  value. 

.  V*\Li1K__LKR0R  :  contains  an  act  ion  Initiated  when  obtaining  a  value  rejected  by  the  filters 
(e.g.  a  value  not  belonging  to  the  domain). 

e.g.  :  {object,  any,  VALdK^ ERROR ,  write  (’the  value’,  V,  ’Is  erroneous.  ;‘'*tve  another  value 
of,  ATT,  ’of’,  self)}. 

.  EXPLANATION  :  contains  an  action  (in  general  a  tessage)  initiated  when  requesting  an  explana¬ 
tion  from  the  operator  following  a  question  asked  by  the  system. 

Utility  Facets 

.  PROMPT  ;  contains  an  action  (in  general  a  message)  activated  hy  the  ’request’  function, 
e.g.  :  {teat_J>nint  ,  pd(t),  PROMPT, 

if  {ground,  reference,  VAL,  t} 
then  write  ('measure  the  value 
of  the  nc  voltage  on’,  self) 
and  flash  (self) 
if  not  write  ('measure  the  value 

of  the  DC  pd  between’,  self,  V?nd*,  t) 
and  flash  (self) 
and  flash  (t)  > 


.  PROMPT  EVAL  :  contains  an  action  (In  general  a  message)  activated  when  evaluating  a  relation¬ 
ship  (binary  operator)  between  an  unknown  value  of  an  attribute  and  a  given  value  of  the  sane 
type  (such  an  evaluation  oi ten  occurs  as  premise  of  an  inference  rule  and  constitutes  the 
interface  of  the  riles/ f fames  type)  Ex.  :  T1  ;  pd(T2  )  ;  <  ;  1. 

.  COST  :  allows  Information  acquisition  cost  data  to  be  placed  here  (value  of  an  attribute)  bv 
means  of  an  Ir_NEEI)EU  procedure  (e.g.  accessibility  of  *  test_polnt  or  a  measurement).  This 
facet  is  for  future  extensions. 

1.2  RULES 

1.2.1  Description 

These  are  rules  of  the  type  :  If  premises  then  conclusions,  reflecting  the  inferential  knowledge 
on  troubleshooting  at  the  level  of  the  rules  of  electronic  operation  or  nal f .jnct 1  on,  rules  of  experience  or 
"wet a- rules”  of  strategy. 

These  rules  are  written  In  external  form  as  Prolog  terms,  with  a  certain  number  of  keywords  (rile, 
if,  then,  and,  or,  no,  among,  etc.)  defined  as  prefix  or  infix  Prolog  operators  with  conceivable  priorities 
for  reflecting  the  syntax  adopted.  The  variables  are  Prolog  variables.  This  defines  an  external  syntax,  ea¬ 
sily  modifiable  during  the  design  phase  while  remaining  within  the  Prolog  framework.  Thereby  it  allows  di¬ 
rect  acquisition  of  the  rules  by  the  Prolog  interpreter  for  the  purpose  of  translation  into  internal  riles 
usable  by  the  Inference  engine. 

Unification  is  used  to  the  fuLlest  extent,  the  conditions  (premises)  and  actions  (conclusions) 
being  evaluated  either  In  the  system  of  frames  or  In  the  base  of  current  facts  or  as  general  Prolog  goals. 

1.2.2  Forward  chaining 

Forwari  chaining  is  performed  by  saturation  on  t lie  current  fact  base,  t.e.  by  enchaining  passes 
through  all  rules  until  the  fact  base  is  no  longer  modified  by  such  a  pass  (optimisation  ensuring  that,  du¬ 
ring  a  pass,  only  those  rules  for  which  one  premise  at  least  has  been  modified  during  the  previous  pass, 
are  activated).  This  check  can  be  easily  extended  to  saturation  on  the  knowledge  base  ronstltued  from  the 
frames.  In  an  open  world,  an  additional  check  is  performed  that  no  contradiction  occurs  in  the  fact 
base. 

Dther  control  modes  are  possible,  such  as  the  interruption  of  forward  chaining  on  a  particular  ac¬ 
tivated  rule  (presence  of  a  STOP  as  conclusion  of  this  rule). 

A  check  may  be  executed  by  certain  rules  of  the  packet  (operating  as  meta-rules).  Tt  Is  in  this 
manner  that  the  action  of  an  activated  rule  nay  be  to  Inhibit  temporarily  (during  renainder  of  the  forward 
chaining)  or  even  to  definitively  remove  a  certain  number  of  rules  from  the  packet. 

During  forward  chaining,  it  is  possible  to  Inhibit  at  will  questions  to  the  operator  nr  aore  gene¬ 
rally  the  procedural  attachments 

Example  of  a  rule  of  experience  used  with  forward  chaining  : 

rule  re f e re nce_vo 1 cage_f an 1 1 
if  fault  (power  supply, *N) 
and  *N;  block_connec  ted ; *ii 

and  exec  (presence  (*B,*Z)  ft  fund  ton  (*7. ,  ?.ener ,  *iunc  )  ) 
and  non-val  Mac  ion  (*C) 
then  hypothesis  (*Func ,*7 , f orward_biased) . 

It  indicates  :  if  there  Is  a  power  supply  problem  on  a  node  and  if  a  block  connected  to  this  node 
comprises  a  Zener  diode  not  yet  validated,  then  adopt  the  hypothesis  that  this  Zener  diode  is  forward  bia¬ 
sed  (fault,  validation,  hypothesis  are  predicates  of  the  current  fact  base,  block  connected  Is  a  frame  at¬ 
tribute,  presence  and  function  are  Prolog  predicates) . 

1.2.1  Backward  chaining 

1.2. 1.1  Mechanism 

In  the  case  of  backward  chaining,  a  rule  Is  initiated  when  a  goal  (initial  Prolog  goa 1  initiated 
from  the  calling  “program"  or  sub-goal  fron,  a  premise  of  another  rule)  'unifies"  with  an  initiator  of  this 
rule.  In  general,  any  conclusion  of  a  rule,  other  than  the  call  to  execute  a  specific  program  (exec 
(<Prolog-goal>) ),  l.e.  any  conclusion  of  th-  <fact>  type  (and  non  <fact>  in  an  open  world  or 
<act  lon_f  rame>  ■  <object>;  {attribute);  <value>  can  operate  as  Initiator  of  this  rule  :  the  ''external"  rule 
is  thus  converted  during  compilation  Into  as  many  "internal"  rules  (Prolog  clauses)  as  it  possesses  such 
conclusions.  The  rule,  Initiated  in  this  manner,  evaluates  Its  premises  (possibly  processed  as  other 
sub-goals)  and  then,  in  the  event  of  success,  activates  Its  conclusions  (validating  In  particular  that  ha¬ 
ving  served  as  initiator).  Implicitly  this  backward  chaining  is  performed  by  the  Prolog  interpreter,  i.e. 
the  strategy  of  cnoice  among  several  rules  having  Initiators  being  unified  with  the  same  sub-goal.  Is  to 
initiate  these  riles  In  the  order  in  which  they  are  stored  in  the  working  space. 

When  this  sub-goal  possesses  no  free  variables,  no  back-track  point  Is  created  at  its  level. 

On  the  other  hand,  when  this  sub-goal  possesses  free  variables,  a  back-track  point  Is  created,  l.e.  the 
possibility  of  several  validations  of  tills  sub-goal  corresponding  ti  different  variable  Instant lat Ions  Is 
left  open. 
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Example  of  a  rale  of  operation  used  with  backward  chaining  : 

rule  dlode_func 

if  *AnoJe; pd(*Cathode);  *U 
and  *Cathode; current; *1 

and  (i  among  exec  (between(i). 5 ,*U,0.8)&*I-0) 
or  exec  (le(*U ,0 .5)&*I^0) ) 
then  normal__operut  Ion  (dlode(  (*Anode,*Cathode)  )  ,*D)  . 

It  indicates  :  If  the  potential  difference  between  the  anode  and  cathode  of  a  diode  lies  between 
0.5  V  and  0.8  V  and  if  the  cathode  current  is  clearly  non-zero  or  If  this  potential  difference  Is  less  than 
0.5  V  and  the  cathode  current  is  close  to  zero,  then  diode  operation  is  normal. 

A  sub-goal  Initiating  this  rule  i9  for  example  :  normal-operation  (d lode( [ N6 , N2 J  ) , 03 ) 

(normal  operation  being  a  predicate  of  the  fact  base  ;  pd  and  current  being  frame  attributes,  between, 
le,  M,&  being  Prolog  predicates  or  operators). 

3. 2.3. 2  Strategies 

-  A  strategy  at  the  level  of  the  order  to  evaluate  the  premises  of  an  Initiated  rule  may  be 
envisaged . 

The  Prolog  by-default  strategy  (evaluation  in  the  written  order)  is  often  not  the  nose  pert.nent 
in  a  given  context.  For  example,  there  is  no  purpose  in  a  conjunction  of  premises,  In  Initiating  in-depth 
search  (with  possible  questions  to  the  user  when  the  answers  have  no  practical  use  elsewhere)  for  the  first 
(n-1 )  if  the  nth  is  clearly  impossible. 

A  first  rough  examination  of  the  premises  can  thus  be  made,  thereby  resulting  m  the  validation  <>r 
invalidation  of  some  and  therefore  sometimes  of  the  whole  rule.  Only  in  the  case  of  Indecision  Is  a  more 
complete  examination  required  with  In  particular  Initiation  of  the  procedural  attachments  I F_NEEl)EH  in  the 
frames  stored  during  the  first  oass.  During  this  reexamination,  it  is  also  possible  to  involve  an  order 
taking  into  account  the  cost  « * f  acquiring  the  Information  contained  In  the  IK  NEEDED  attachments  (use  of 
the  COST  facet). 

~  Another  strategy  can  b.*  used  at  the  level  of  the  order  in  which  the  rules  likely  to  lead  to  a  gi¬ 
ven  sub-goal  ire  examined  rules  whose  Initiators  unify  with  this  sub-goal ) . 

Mere  again.  It  Is  often  preferable  to  avoid  the  order  given  by  Prolog,  which  Is  that  In  which  the 
rules  are  loaded  ;  this  Is  done  for  the  purpose  of  separating  the  declaration  of  knowledge  (declaration  of 
the  rules  by  the  expert)  and  the  control  of  their  use  (which  the  dat.t-process  1  ng  engineer  should  be  able  r 
specify  independent  ly)  as  well  as  fur  cite  purpose  of  achieving  max/iaun  •lecldmhj  l  i  ty  and  modularity  (rules 
produced  "pell-sat  1 1",  possibly  by  several  persons). 

3.  "3,  3.3  Trace 

In  the  case  of  backward  chaining,  a  trace  (dynamic  on  the  console  ind  recorded  In  files)  is  provi¬ 
ded  of  : 

-  the  initiation  of  each  rule  on  a  sub-goal, 

-  the  success  or  failure  of  this  rule  :  in  the  latter  case,  the  premise  on  which  this  failure  oc¬ 

curred  is  first  mentioned. 

This  trace  is  Indented  according  to  the  depth  level  of  the  calling  sub-goal.  In  addition,  the  1 i s* 
of  rules  effectively  executed  In  backward  chaining  for  an  initiated  goal  is  provided.  This  Is  used,  for 
example,  in  the  basic  DEDAL  F.  cycle  In  order  to  select  (for  forward  chaining)  the  rules  of  experience  having 
at  least  one  premise  unifying  with  a  conclusion  produced  by  a  rule  executed  during  the  previous  back  chai¬ 
ning. 

3 ,l.U  Representation  of  Rules 

In  addition  to  their  Internal  translation  into  Prolog  clauses,  die  rules  have  .<  f  r  tme  representa¬ 
tion.  This  makes  it  easy  to  talk  of  rules  by  means  of  some  of  their  properties  (attributes),  which  Is  in¬ 
dispensable,  for  example,  when  writing  the  strategy  and  control  neta-mles.  \mong  others,  a  rule  will 
therefore  possess  premise  and  conclusions  attributes  producing  the  list  of  its  premises  and  conclusions. 

Thus  it  Is  possible,  when  compiling  a  packet  of  rules  PI  (with  backward  or  forward  chaining),  to  determine 

the  possible  effects  of  a  given  rule  on  another  packet  P2  of  rules  (with  forward  chaining),  thereby  allo¬ 
wing  chaining  optimization  :  forward  chaining  of  P2  limited  to  the  rules  of  P2  using  the  new  knowledge  ge¬ 
nerated  by  the  execution  of  PI. 
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In  addition  to  the  interfaces  needed  between  the  expert  and  the  knowledge  bjse  (FRAMES  and  R,|.ESj 
for  constituting  and  updating  this  base,  two  other  type*  of  common l cat  Ion  are  provided,  related  t  »  : 

-  general  Information  on  the  circuit  under  test  (expert  domain), 

-  specific  information  on  the  circuit  inder  test  (operator  domain)* 

A  set  of  syntaxes  defined  by  DEDALE  allows  the  communication  of  Information  ohtaMed  #r.»m  e\(#n.,! 
flies  or  from  the  console.  A  set  of  messages  and  graphical  tiols  enables  the  user  to  conraunl it  e  with 
DEUALF. . 

4.1  GENERAL  INFORMATION  UN  THE  CIRCUIT 

DEDALE  merely  records  the  data  provided  by  an  expert  an  checks  their  syntax.  The  data  are  ohtai  <e.i 
frotu  two  flies.  The  first  file  contains  the  structural  description  of  the  circuit  »n*1  the  sc. ■••ad  rile 
contains  the  functional  description.  Semantic  coherence  at  the  level  of  block,  node  and  function  names  Is 
required  in  orJer  to  link  or  not  structural  and  functional  entitles. 

4.2  SPECIFIC  INFORMATION  ON  THE  CIRCUIT  UNDER  TEST 

During  diagnosis,  DEUALF.  may  require  additional  Information  for  Investigating  or  concluding  :  Qua¬ 
litative  measurements  or  observations  of  electrical  parameters,  temperatures,  physic tl  appearance  of  compo¬ 
nents. 

Example  of  a  message  :  what  is  the  potential  difference  between  the  anode  ant  cathode  of  diode  ill  ’ 

The  expected  reply  may  K:  checked  (and  possibly  refused)  by  DEDALE .  in  this  case,  the  oessape  Is 
repeated  (generally  with  a  message  of  explanat Ion) . 

CONCLUSION 


The  present  state  of  progress  enables  DEDALE  to  be  considered  as  a  prototype,  but  one  already  pos¬ 
sessing  performance  characteristics  such  as  It  can  be  operated  by  final  users  :  troubleshooter*.  This  is 
mainly  due  to  the  quality  of  the  IT1  interpreter  used  (VM  PROL(Xi)  (o|  and  the  power  the  romnuter  (131 
3090/200)  on  which  the  system  is  run. 

It  is  nevertheless  necessary  to  Industrialize  the  system  which  should  result  in  easier  maintenance 
of  DEUALF.  and  extension  of  the  proposed  functions. 

This  will  he  achieved  by  using  the  F.M1CAT  (Ml  4)  expert  system  development  envirmnent  which  »  s’i 
has  produced  for  Its  own  needs  and  which  ts  now  commercially  available.  EMI  Mr  (  114)  Is  based  on  an  exten¬ 
sion  of  the  Prolog  language  to  an  object-oriented  language.  The  objects  provide  standard  representation  ->t 
all  types  of  knowledge  :  factual,  deductive  (rules)  and  met-i-knowledge.  Among  the  many  facilities  offered, 
mention  has  to  be  made  of  the  possibility  of  Jeflnlng  multiple-rule  formalisms,  of  limiting  both  the  appli¬ 
cable  rules  and  the  objects  they  may  apply  to,  and  of  memorizing  knowledge  hose  ‘states'  used  later  for 
back  tracking. 

The  contribution  of  KM 10. AT  (MI  4)  is  at  the  level  of  : 

-  maintenance,  since  the  major  part  of  <Ml ntenance  will  henceforth  he  at  the  level  of  the  r  ...!  f»- 
self  as  a  constituent  element  of  the  overall  system  and  since  the  use  ->j  mu  1 1  1  p le- r  1 1 e  forma¬ 
lisms  will  considerably  improve  readability, 

-  functions,  since  the  mechanises  offered  (Including  n  particular  the  state  semrizatt  m  me, na¬ 
nism)  will  allow  the  Implementation  of  more  sophisticated  and  no  re  efficient  >t  r  it  eg  les . 

Another  current  evolution  in  the  DF.UAI.E  system  deals  with  qu.ill'ative  modelling  ami  r.MS.mi n.* . 
Since  no  numerical  model  of  behaviour  la  available  for  components  outside  of  their  n.»raal  r»  ce  1  f,|-v- 
t  toning,  the  chosen  solution  Is  to  express  models  In  terms  of  la  l  o  qua  1  *  t  at  1  ve  changes  in  the  par  net  er-. 
involved  [ 4J . 

In  conclusion,  i-  nust  he  emphasized  that  the  cist  of  production-engineering  an  expert  wvste.n  re¬ 
mains  high  but  acceptable  as  a  result  of  using  high-perf  onaance  tools  such  as  EMI  :a  r  f-fl4)  and  is  justified 
for  applications  amenable  to  the  techniques  of  expert  systems,  such  as  diagnostic  and  ma  i  at  e-»ai\.  e .  Several 
expert  systems  of  this  type  are  being  produced  or  developed  within  ESI  ,  for  areas  as  varied  as  Vm  ]*■-!  inks, 
airborne  radars  and  satellites. 
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SUMMARY 


A  hybrid  knowledge -based  system  is  described  which  provides  advice  to  Air  Traffic  Controllers  on  the 
optimal  tactics  for  resolving  predicted  aircraft  conflicts.  The  overall  functional  architecture  is 
described  which  has  both  computational  algorithms  (in  classical  software)  and  rule  bases  containing  the 
knowledge  and  experience  of  controllers  in  the  air  traffic  environment. 

The  system  is  designed  to  replicate  the  way  in  which  a  Controller  might  react  to  a  predicted  confllct(s). 
It  responds  to  conflict  predictions  with  resolution  advice,  which  depends  on  both  formal  rules  (e.g., 
MANOPS)  and  on  heuristics  obtained  from  Controllers  based  on  their  experience  in  the  air  space. 

The  hybrid  nature  of  the  system  is  based  on  a  design  approach  involving  a  decomposition  of  the  overall 
sequence  of  logical  decisions  required  to  resolve  the  predicted  conflict  into  a  "Global  Inferenclng 
Algorithm"  (GIA).  The  GIA  approach  simplified  the  design,  partitioned  in  a  natural  way  the  knowledge  base, 
enhanced  the  performance,  and  permitted  a  systematic  validation  of  each  step  of  the  resolution  by 
comparison  to  a  Controller's  decision  in  similar  circumstances. 

This  paper  describes  first  a  GIA  for  resolving  conflicts  in  a  sparse  airspaces  (i.e.,  one  in  which  a 
resolution  is  effected  without  inducing  further  conflicts)  and  then  extends  this  to  a  dense  air  space 
(i.e.,  one  in  which  a  resolution  tactic  could  induce  subsequent  conflicts).  The  question  of  convergence 
(and/or  the  lack  of  it)  of  a  completely  autonomous  system  is  discussed  but  not  resolved. 

The  prototype  of  the  sparse  airspace  system  was  programmed  using  an  inductive  systems  builder  called  TIMM 
on  an  IBM/XT.  It  contains  750  rules  and  responds  to  presence  of  a  detected  conflict  in  approximately  ten 
seconds. 

0.0  A  Perspective  on  Air  Traffic  Control 

Air  traffic  controllers  provide  the  essential  strategic  and  tactical  control  point  in  a  complex 
system  designed  to  ensure  the  safe  orderly  movement  of  aircraft.  The  job  requires  considerable 
Intelligence  to  perceive  the  essential  aspects  of  impending  dangerous  situations,  and  considerable 
experience  to  make  satisfactory  decisions  to  avoid  conflicts  in  flight  paths,  under  situations  which  at 
times  can  be  very  stressful.  The  spectre  of  disaster  always  haunts  the  controllers  as  the  potential  for 
errors  is  contemplated.  Air  traffic  control  requires  decisions  involving  human  lives  at  one  extreme,  and 
considerable  capital  costs  and/or  operating  costs  at  the  other;  all  this  with  incomplete  data,  in  an 
imperfect  control  loop,  and  in  a  time  constrained  situation. 

Aircraft  flying  in  controlled  spaces  are  assumed  to  have  filed  flight  plans,  and  normally  to  be  under 
the  surveillance  of  ground  based  radar  or  at  least  periodically  to  file  position  reports.  The  pilot's  and 
the  controller's  actions  are  constrained  by  many  factors  which  could  be  considered  as  being  based  on  both 
static  and  dynamic  data.  Static  data  is  slowly  varying  and  includes  such  items  as  government  prescribed 
rules  for  separation,  the  physical  capabilities  of  aircraft,  the  location  of  emergency  fields,  features  of 
the  terrain,  etc.  Dynamic  data  includes  such  things  as  the  current  weather,  emergency  landing  priorities, 
the  number  of  aircraft  In  the  controlled  space,  etc. 

Errors  in  judgement  calls  can  occur  from  many  uncontrollable  factors  ir.  the  process,  such  as 
imperfect  understanding  of,  or  adherence  to  instructions  by  the  pilot,  lack  of  exact  information  on 
location,  poor  and/or  noisy  communications  channels,  unexpected  weather,  etc.  Thus,  the  controller  must 
work  with  an  intrinsic  uncertainty  both  in  input  data  and  with  exact  compliance  to  the  control  decisions. 

A  conflict  occurs  whenever  a  given  airspace  is  occupied  by  two  or  more  aircraft,  and  is  defined  as 
the  violation  of  any  one  of  a  set  of  separation  criteria  specified  in  th»  appropriate  Air  Traffic  Manual 
of  Operations  (MANOPS).  Conflict  resolution  consists  of  developing  anc*  implementing  a  set  of  maneuvers 
specifying  flightplan  modifications  for  one  (preferably)  or  more  of  the  aircraft  involved  in  the  conflict. 
This  set  of  maneuvers  is  derived  by  applying  some  combination  o;  the  possible  resolution  tactics  to  the 
particular  conflict  being  considered. 

In  general,  conflict  avoidance  is  an  n-body  problem,  involving  the  separation  of  moving  objects  in  a 
three-dimensional  space.  This  class  of  problems  exhibits  an  exponential  growth  in  computational  complexity 
as  the  number  of  bodies  increases.  Thus,  classical  programs  based  on  algorithms  have  failed  for  all  but 
very  simple  problems.  Since  this  problem  is  routinely  solved  in  practice,  a  heuristic  approach  based  on 
the  experience  of  Controllers  seemed  appropriate. 

1.0  Introduction 

Air  traffic  control  has  many  operational  procedures  and  other  attributes  which  must  be  learned  from 
experience.  This  single  feature  has  Influenced  many  research  groups  world-wide  to  attempt  to  incorporate 
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some  aspects  of  artificial  intelligence  into  the  automation  process. 

In  this  paper,  we  will  review  the  conflict  resolution  problem  and  demonstrate  some  results  with 
respect  to  automating  this  task  by  capturing  the  rules  and  procedures  used  by  controllers  to  arrive  at  a 
decision.  As  part  of  this  demonstration  we  will  show  how  the  process  of  executing  such  a  task  can  be 
decomposed  and  allocated  to  regular  software  as  well  as  to  rule-based  procedures.  The  result  is  a  hybrid 
software  system  containing  both  conventional  software  procedures  and  modules  containing  the  rules 
representing  the  procedures  followed  by  an  experienced  controller. 

To  accomplish  this  demonstration,  we  first  discuss  the  resolution  in  an  airspace  that  we  refer  to  as 
sparse.  In  this  simplified  air  space,  the  conflict  resolution  can  take  place  without  inducing  other 
conflicts.  This  assumption  allows  the  design  process  to  go  on  without  undue  difficulty  and  provides  the 
tutorial  background  for  understanding  the  more  complex  space  in  which  the  resolution  of  one  conflict  can 
induce  others. 

The  resolution  of  conflicts  in  a  space  containing  N  aircraft  can  become  computationally  complex  very 
quickly.  Indeed,  Che  reason  that  algorithmic  attempts  to  solve  this  problem  have  failed  is  a  function  of 
both  the  exponential  complexity  of  the  computational  load  that  these  routines  demand  and  the  difficulty  of 
defining  and  implementing  the  inferencing  process  required.  This  is,  perhaps,  the  main  motivation  for 
using  an  expert  system  approach;  for  controllers  routinely  solve  this  problem  based  on  experience  without 
having  the  benefit  of  a  mathematical  algorithm.  Controllers  normally  adopt  the  procedure  that  is  aimplesc 
to  execute.  A  good  resolution  Is  the  simplest  to  implement  tactically.  This  implies  also  that  only  one 
aircraft  should  be  involved  whenever  possible. 

While  an  expert  system  will  always  attempt  to  emulate  the  final  decisions  of  a  Controller,  it  is 
often  possible  to  consider  alternatives  that  would  be  computationally  Intense  without  the  aid  of 
computers.  Thus  an  expert  system  backed  by  reasonable  computing  power  can  consider  alternatives  and 
procedures  that  might  be  eliminated  in  normal  operations.  There  is  no  evidence  that  the  addition  of  this 
form  of  automation  has  increased  the  quality  of  decisions,  ,  and  this  is  not  Che  major  issue.  The  issue  is, 
finally,  can  an  automated  system  handle  traffic  on  arbitrary  flight  paths  in  dense  spaces  with  speed  and 
reliability.  ^ 

Many  attempts  have  been  made  to  model  the  air  traffic  problem  by  analytic  means.  It  appears  that 
these  attempts  have  been  in  three  areas:  either  algorithms;  inferencing  models  or  expert  knowledge.  The 
most  promising  in  our  opinion  is  based  on  experience,  combined  in  an  overall  inferencing  procedure  that 
is  dependent  both  on  rules  and  on  procedures.  Thus,  our  approach  is  to  start  with  'What*  must  be  done  and 
let  the  'How'  emerge  either  as  a  knowledge  base  or  as  an  algorithm.  This  approach  seems  to  drive  the 
requirements  for  particular  functions  and  emulates  what  a  Controller  does  in  practice.  The  question  of 
implementing  the  "Hows"  will  be  discussed  and  illustrated. 

In  Section  2.0,  a  simplified  model  of  the  ATC  problem  Is  proposed  so  that  we  can  agree  on  the  basic 
jargon  for  further  discussion.  The  description  is  Incomplete,  but  sufficient  for  our  work. 

In  Section  3.0,  a  global  set  of  interconnected  modules  is  developed  which  solves  the  resolution 
problem  in  a  sparse  airspace.  Thi9  is  called  a  global  inferencing  algorithm  (GIA).  Some  of  the  modules 
are  classical  software  and  some  contain  rules  obtained  from  controllers.  A  system  was  programmed  from  this 
model  and  results  are  presented. 

In  Section  4.0,  the  system  is  extended  to  cover  the  case  where  a  resolution  procedure  can  induce 
further  conflicts  which  in  turn  have  to  be  resolved. 

2.0  Modeling  the  ATC  Problem 

The  requirements  definition  formed  the  initial  parts  of  the  systems  design.  Such  a  definition 
consists  of  feasibility,  attributes,  performance,  maintenance  and  growth,  and  validation  sections. 

The  feasibility  of  an  expert  system  implementation  for  conflict  resolution  was  based  on  the 
evaluation  of  a  number  of  specific  attributes.  For  example,  the  conflict  avoidance  task  is  well  bounded  in 
terms  of  the  knowledge  required  and  results  obtained,  and  makes  extensive  use  of  symbolic  reasoning  in 
terms  of  the  spatial  and  temporal  relationships  between  moving  aircraft,  rhe  task  itseLf  is  routinely 
taught  to  new  controllers,  and  is,  therefore,  decomposable  into  sub-tasks  for  this  purpose.  The  range  of 
problems  that  can  be  solved  and  the  quality  of  decisions  increases  with  experience.  Used  as  an  advisor, 
the  system  would  alLeviate  much  of  the  pressure  felt  while  handling  busy  airspaces.  An  expert  system  would 
also  allow  controllers  to  apply  a  high  level  of  capability  to  conflict  situations  and  to  prepare  alternate 
solutions  for  consideration.  Expert  solutions  presented  by  the  system  would  also  provide  on-the-job  skill 
improvement  for  novice  controllers. 

These  factors  provide  sufficient  evidence  to  warrant  an  expert  systems  approach  to  the  conflict 
avoidance  problem,  an  assertion  which  will  be  validated  by  the  design  .and  performance  of  the  prototype 
system.  The  prototype  was,  therefore,  designed  to  demonstrate  both  feasibility  and  proof  of  concept. 

The  prototype's  attributes  can  be  distinguished  as  being  either  physical  or  logical.  Physically,  the 
prototype  runs  on  an  IBM  PC/XT.  Logically,  it  used  a  commercial  system  builder  (called  TIMM)  to  create  and 
maintain  the  knowledge  bases.  The  user  interface,  which  prompts  the  user  for  data  and  presents  formatted 
results,  was  written  in  a  high  level  language  (Fortran),  so  that  a  user  need  not  be  familiar  with  the 
expert  system  builder  to  run  the  prototype. 

To  demonstrate  feaaibllity  the  prototype  Implemented  a  subset  oi  all  conflict  types,  tactics,  and 
domain  data  elements.  These  provided  a  sufficient  foundation  for  proving  feasibility,  and  for 
demonstrating  the  concepts  relevant  to  conflict  avoidance.  The  architecture  handles  single  conflicts,  and 
does  not  consider  future  conflicts  that  might  be  caused  by  resolving  present  ones.  Growth  of  the  prototype 
is  possible,  because  it  Is  capable  of  being  expanded  to  Include  more  conflict,  types,  resolution  tactics, 


data  on  which  to  base  decisions,  and  rules  through  which  decisions  will  be  made.  In  addition,  as  wi 1 l  be 
shown,  it  is  the  first  step  in  the  extension  to  dense  spaces. 

Validation  was  performed  by  devising  test  problems  that  exercised  all  of  the  system's  capabilities 
and  each  of  the  conflicts  and  tactics  recognized.  The  solutions  given  by  the  expert  system  were  compared 
with  those  given  by  a  doa&in  expert  in  conflict  resolution. 

This  system  emphasized  expert  system  technology  for  the  selection  and  development  of  conflict 
avoidance  tactics.  For  this  reason,  it  assumed  that  conflict  detection  Is  handled  by  standard  procedures 
callable  at  any  time.  It  also  did  not  attempt  to  solve  classical  software  problems,  although  they  were 
Identified  and  characterized.  This  included  automatic  acquisition  of  data  from  present  air  traffic 
systems,  and  calculating  details  of  the  maneuvers  required  by  each  tactic. 

3.0  A  Global  Inferencing  Algorithm  for  Sparse  Airspaces 

In  this  section,  a  global  inferencing  algorithm  is  presented  for  conflict  resolution  in  a  sparse 
airspace.  The  purpose  is  to  both  illustrate  how  this  procedure  is  done  and  to  orepare  for  the  extension  to 
a  dense  airspace.  The  procedure  is  first  to  interpret  and  then  to  replicate  the  detailed  steps  taken  by 
the  airtraffic  controller  in  resolving  a  conflict.  The  knowledge  engineer  muse  follow  the  controller's 
thought  processes  and  attempt  to  represent  them  in  a  form  that  is  codeable  by  current  technology.  The 
process  requires  extensive  cooperation,  as  both  the  controller  and  the  knowledge  engineer  must  make 
accommodations  Co  each  others  skills  and  technology. 

System  Level  Issues 

Conflict  resolution  for  our  purposes  is  viewed  as  a  potential  reconfiguration  of  the  aircrafts' 
original  flightplans.  This  view  Is  taken  because  it  is  possible  that  the  resolution  of  a  conflict  might 
permanently  modify  the  remainder  of  the  flightplans  of  the  aircraft  involved.  Also,  more  efficient  and 
more  general  resolutions  can  be  achieved  if  flight  plan  reconfigurations  are  allowed. 

Before  a  global  inferencing  algorithm  can  be  created,  the  logical  sequence  of  functions  must  be 
postulated.  The  first  step  in  finding  these  functions  is  to  view  the  Conflict  Avoidance  Expert  System  at 
it's  highest  level  of  abstraction  as  a  black  box,  as  shown  in  Figure  1.  It  accepts  some  specification  of 
an  airspace  as  it's  input,  and  provides  a  recommendation  for  avoiding  the  conflict  as  it's  output.  It  also 
requires  rules,  heuristics,  and  classical  software  procedures  to  guide  the  system’s  operation,  which  must 
be  acquired  from  air  traffic  controllers  and  aviation  authorities  during  system  design. 

The  input  data  Includes  at  least  the  same  information  available  to  an  air  traffic  controller:  for 
example,  some  statement  of  aircraft  flightplans  (analogous  to  the  flight  strips  currently  in  use),  and 
data  about  the  airspace,  which  could  be  extracted  from  present-day  air  traffic  computer  systems.  The 
output  data  specifying  conflict  resolutions  must  be  made  available  far  enough  in  advance  of  the  conflict 
in  order  to  be  used,  so  the  conflict  detection  must  be  done  well  before  the  conflict,  and  the  Conflict 
Resolution  system's  response  time  must  be  reasonably  short.  The  overall  time  budget  allocated  to  each 
function  is  a  system  level  consideration.  All  of  this  data  can  be  formalized  and  tabulated  in  a  data 
dictionary  and  as  a  set  of  performance  specifications. 

Global  Inferencing  Algorithm 

Initially  at  least,  three  logical  functions  seem  necessary  for  resolving  conflicts,  as  shown  in 
Figure  2.  First,  the  conflict  must  be  detected  and  characterized.  Second,  an  acceptable  set  of  tactics 
that  may  be  used  to  solve  the  conflict  must  be  selected.  Finally,  the  details  of  each  tactic's 
implementation  must  be  determined  for  the  particular  conflict  and  airspace  state. 

The  three  functions  shown  in  Figure  2  must  answer  the  following  questions: 

Conflict  Classification 

What  kind  of  conflict  is  it? 

Determine  Tactics 

What  tactics  might  be  used  to  resolve  this  conflict? 

Which  of  these  will  actually  work? 

Which  tactic  is  the  best? 

Determine  Implementation 

How  will  these  tactics  be  implemented? 

Answers  to  the  first  question  classifies  the  conflict.  It  ensures  that  the  system  will  understand  the 

type  of  conflict  it  is  dealing  with,  and  that  resolution  tactics  to  be  applied  to  this  conflict  may  be 

enumerated.  Data  required  to  answer  this  question  will  include  only  information  about  the  two  aircraft 
Involved. 

Answers  to  the  second  question  select  tactics  on  the  basis  of  data  about  the  conflict  itself  and  the 
aircraft  involved.  This  is  analogous  to  the  way  an  air  traffic  controller  first  focuses  attention  on  the 
conflict,  only  widening  the  scope  of  attention  when  it  Is  determined  *hat  might  be  done.  The  result  of 

this  step  is  a  set  of  potential  tactics,  (l.e.,  those  tactics  that  have  the  potential  to  resolve  the 

conflict,  depending  on  the  state  of  the  airspace). 


Answers  to  the  third  question  broadens  the  scope  of  the  Hymen's  attention  t  o  Include  the  air  spate 
and  other  aircraft  In  It,  so  that  each  potential  tactic  must  result  In  a  safe  conflict  resolution  >r  be 
discarded.  This  evaluation  results  In  a  reduced  set  of  possible  tactics  (i.e.,  tartl<s  with  which  It  In 
possible  to  resolve  the  conflict). 

Each  of  the  possible  tactics  Is  now  examined  to  determine  which  one  is  best  .  This  pr 1  or i t t /at  1  on 
must  take  into  account  each  aircraft's  efficiency  of  operation  and  any  operational  constraints  Imposed  hv 
air  traffic  procedures. 

The  final  question  is  “How  would  these  tactics  be  Implemented and  Is  answered  bv  determining  the 
exAct  maneuver  specifications  for  each  possible  tactic. 

Each  of  these  functions  is  treated  in  more  detail  In  the  following: 

Conflict  Claaalf 1 cat  loo 

While  detailed  definitions  for  all  possible  conflict  situations  are  contained  in  documents  such  as 
KANOPS,  Controllers  typically  organize  related  conflict  situations  Into  groups,  and  solve  each  group,  or 
"type"  of  conflict,  in  a  similar  manner.  However,  conflict  detection  software  Is  based  on  strt.  t  <  uni  M  r 
definitions.  Therefore,  the  system  must  classify  detected  conflicts  (i.e.,  determine  their  type,  as  a 
controller  would,  In  a  way  that  the  rest  of  the  system  will  be  able  to  use). 

Each  conflict  type  will  have  a  set  of  resolution  tactics  associated  wtth  It.  Therefore,  > Me 

organization  of  the  conflict  types  and  their  resolution  tactics  Is  Interdependent,  since  each  detailed 
conflict  must  be  solvable  using  any  of  the  associated  tactics,  regardless  of  how  other  factors  Intioeuo- 
the  conflict's  resolution. 

The  conflict  classification  function  In  the  prototype  consists  of  a  single  rule  hast*  coni •»  I  n  1  ug  .* 
rules  that  will  recognize  10  types  of  conflicts*  It  requires  basic  data  about  the  conflict,  iniwdlng  the 
flight  level,  airspeed,  heading,  and  attitude  of  both  aircraft  at  the  moment  of  tin*  until  t,  i !  ;  >t  whi  i 
may  be  derived  from  data  available  to  controllers,  such  as  fllghtstrfp  information.  The  l't -*t  vp* 
presently  carries  three  of  these  conflict  types  through  to  Prlorltiz.it  Ion:  Head-on,  overtaking,  m.i 

Crossing  Tracks. 

Tactic  Selection 

The  purpose  of  this  function  Is  to  determine  those  tactics  that  have  tin-  potential  to  jevLve 

specified  conflict.  This  selection  process  is  based  'inly  <  knowledge  about  the  <ontli«t  i  t  *■>•*  1 1  ‘i.e.,  i 

data  about  the  conflict  type  and  the  aircraft  involved).  Uata  about  the  airspace  itself  >r  tthei  ilr  i.it 
are  not  used. 

The  knowledge  base  can  be  partitioned  for  efficient  searches  by  using  a  loox-up  table  r  >  •lrf*-tmi  >♦- 
which  resolution  tactics  should  be  explored  for  a  given  conflict  type.  A  conflict  type  a, cesses  i  r  *w  Mi 
the  table,  which  specifies  which  tactics  should  be  explored.  A  subset  of  this  look-up  t .» h  1  *  •  is  shown  t 
Figure  4. 

The  resolution  tactics  that  are  applied  hy  the  prototype  are  Chang**  Flight  Level  >'p,  Chang*-  flight 
Level  Down,  Increase  Grounds  peed,  and  Change  Track  to  Port.  These  tattles  «..*  applied  t*-  hot'1  air  taM 
appropriate.  The  tactic  selection  expertise  consists  of  a  role  base  of  111  rules,  an.l  has  S.*. 
partitioned  according  to  both  conflict  types  and  resolution  tactics.  This  will  result  in  t  he 
Selection  rule  base  being  partitioned  Into  a  number  of  rule  sets,  with  one  set  for  every  i>>mh:nati  n-  >t 
conflict  type  and  resolution  tactic,  as  shown  in  Figure  b. 

Tactic  Evaluation 

When  given  a  set  of  tactics  that  could  potentially  solve  the  .onfllcr.  tin*  Ti  M  Kvilu.itt-Ui  Mm.  im-,i 
must  eliminate  those  tactics  that  can  not  be  used  to  solve  the  •  nnf  l  i  ■  t  in  t  fie  present  isrsp-r..- 
configuration.  The  result  is  a  set  of  possible  tactics  (I.e.,  those  tactis  t  ■  •  r  which  It  is  possible  ?  • 
determine  a  complete  conflict  resolution  procedure). 

This  evaluation  involves  considering  all  other  factors  that  might  aft»<t  the  i  mp  lemeot  at  1  .m  *t  this 
tactic.  This  would  Include  the  location  of  other  aircraft,  possible  Interferences  caused  bv  plan.-te! 
maneuvers,  airspace  rest  r  1  ct  ions ,  maximum  cruising  altitudes,  etc.  In  order  to  determine  sons-  it  this 
data,  classical  software  routines  must  be  Invoked  bv  antecedents  within  the  rule  base. 

The  Tactic  Evaluation  rule  base,  consisting  of  7  2  rules,  is  partitioned  in  t  fie  same  way  as  the  lacti. 
Selection  rule  base,  so  that  only  rules  pertaining  to  the  individual  problem  will  be  examined. 

Tactic  Prlorltlcatloa 

This  function  will  accept  a  set  of  possible  tactics  and  sort  them  In  order  of  preference  bv  assigning 
a  priority  to  each  tactic.  These  priorities  specify  their  relative  preference,  rather  than  their  absolute 
preference.  It  uses  a  rule  base  of  bt>  rules,  partitioned  in  the  same  way  that  the  two  previous  functions 


The  calculation  of  these  priorities  is  based  on  each  tactic's  base  priority  (which  urates  it  's 
initial  utility  unconstrained  by  any  conflict  factors),  operational  pr# ferences  of  the  airspace  (e.g.,  t  hp 
effects  of  NOTAMa),  and  efficiency  criteria  of  aircraft  involved  (e.g  ,  fuel  consumption). 


Rmmolutiom  Procedure  Development 


The  resolution  procedure  development  tunrtlon  Is  responsible  tor  <  a  1  ru  l  at  1  rig  the  details  ot  .ill 
avineu vers  required  to  resolve  the  conflict.  In  order  to  do  this,  preceding  modules  must  provide  this 
function  with  all  of  the  information  required  to  calculate  the  maneuver  spec  1 1 1  cat  1 ons .  This  required  data 
Is  different  for  each  tactic,  and  depends  on  the  number  of  maneuvers  in  rh.*  »  .it  1  ,  ?  h»  v*.  tr.i  f  t-r '  st  1  •>  -f 

the  conflict  situation,  etc. 

It  ts  assumed  that  the  conflict  and  the  airspace  will  impose  time  constraints  on  the  maneuvers, 
forcing  them  to  occur  within  certain  time  windows.  In  order  to  produce  unambiguous  spec  1 1 1  cat  ions ,  It  Is 
necessary  to  use  both  distance  and  lime  factors,  depending  on  how  the  flight  if  aircraft  Is  affected  by 
wind  conditions,  navigational  capabilities,  etc. 

This  function  fs  a  problem  in  rlaaslal  software,  and  ts  essential  !v  i  set  •»}  maneuver  vectors 
specified  in  terms  of  time  and  space.  It  can  be  completely  specified  as  a  set  of  procedures,  requiring  !;<• 
heuristic  knowledge,  and  is  considered  to  be  in  the  same  -lass  as ,  although  less  complex  than,  eon!  Hit 
detection.  Therefore,  it  was  not  Implemented  in  the  prototype  system. 

Validation  Results 

Validation  testing  was  performed  by  providing  problems  for  the  system  to  solve  that  showed  ■ orrect 
operation  and  demonstrated  particular  aspects  of  It's  capabilities.  These  results  were  approved  bv  domain 
experts  as  cor respond  1 ng  to  those  thev  would  have  recommended. 

An  example  of  a  test  problem  solved  by  the  system  Is  shown  in  Figure  *.  It  Is  u  ove  r  t  a*  I  tig -t  ypi 
conflict  between  a  C*>A  Galaxy,  representative  of  a  large  and  cumber  some  transport  aircraft,  and  «  Cessna, 
a  small  and  more  maneuverable  aircraft.  At  Its  current  level  of  expertise,  the  prototype  knows  ihnui 
tpplvlng  five  tactics  to  this  conflict,  which,  along  with  the  protot  vpe  's  results,  are  shown  in  Figure 

Performance  Assessment 

The  prototype  presently  requires  approximately  I  seconds  to  resolve  a  conflict,  not  including  time 
required  for  user  interactions.  Given  the  an'  imafed  acquisit:  <n  a  data  I  r-f  r  he  .mil  r-d  Iit  from  Mils 

time-consuming  task  l,  t  lie  prototype  oiil  1  he  onstilerahlv  upgraded  he  to  re  it  ’s  pert  ormanre  required  a 
machine  more  powerful  than  an  I HM  PC  AT.  This  gr'»wt  h  will  ••  vent  ua  1  Iv  reduce  per  t  ■•rsiani  «■  below  uveptuhle 
levels  due  to  the  large  number  of  combinations  >f  conflicts  ind  resolution  tactics.  However,  pr  iprleMrv 
developments  at  CompKngServ  suggest  that  a  full  scale  coot  It-:  avoidance  system  an  he  supported  by  an  !  KM 
PC/AT  with  an  attached  real-time  expert  svstem  processor. 

The  'lassical  software  portion  ot  the  prototype  is  the  shell,  which  contains  i .  i  •  h «  lines  of  Fortran 

code.  However,  the  growth  of  the  shell’s  complexify  would  be  less  than  linear.  as  the  shell  presently 

handles  knowledge  base  invocation,  which  would  not  change,  ind  data  input  and  output  processing,  which 
would  expand  slnwlv  since  most  of  the  system’s  gr  »wth  w -u  1  d  be  untlned  to  the  Knowledge  bases. 

4.(1  A  CIA  for  Dense  Airspaces 

The  extension  of  the  inferenciog  pr*>< edoie  to  a  dense  airspace  Is  demonstrated  here  in  two  steps: 
First,  to  a  situation  in  which  the  Controller  Is  still  involved  in  resolving  difficult  cases  {called  s--ml 
ant  nnomnuH  )  and  finally  to  a  situation  in  whf  h  rh.-  svsr--m  s.  •arches  for  a  final  solution  and  calls  for 
help  nnlv  when  no  solution  seems  possible. 

The  design  of  a  such  svstem  is  dependent  mi  the  philosophy  adopted.  In  the  ippruarh  adopted  bv 
CompKngserv ,  It  was  considered  Important  that  nnV  resolution  procedure  disturb  the  airspace  as  little  as 
possible.  This  implies  that  anv  tactics  adopted  t  <  •  resolve  a  conflict  should,  it  possible,  disturb  only 
one  of  the  ?w«>  aircraft  Involved  and  only  in  extreme  circumstances  should  the  other  (or  others)  be 
disturbed.  Clearlv  the  application  of  this  rule  must  be  dependent  on  the  experience  ot  controllers,  since 

the  boundaries  are  nut  well  defined  and  anv  procedure-  mist  a! wavs  include  safttv  as  the  prime  directive. 

The  other  important  consideration  Is  how  much  autonomy  is  t he  system  to  be  granted.  In  the  end,  this 
would  depend  on  the  confidence  level,  which  would  grow  as  » he  system  was  seen  t--  solve  more  complex 
problem*.  This  Issue  Is  not  addressed  here,  but  the  technical  problem  ot  the  convergence  of  the  resolution 
algorithm  is  postulated.  The  system  being  proposed  has  not  been  . nnst rn>tc  1  (at  the  t liw  of  writing',  and 
thus  the  convergence  can  only  be  argued. 

The  overall  design  proceeds  In  a  sequence  of  steps  (tu  resolve  1  he  cont  lift),  wit  It  each  step  be  I  :tg 
based  on  rhe  principle  of  minimal  perturbation  of  the  existing  state  spar*.  We  will  present  the  material 
as  an  extension  to  the  sparse  space,  and  in  subsequent  evolution  from  se:nl  autonomous  to  autonomous.  The 
semi  autonomous  system  Is  defined  as  one  In  which  a  final  recourse  to  help  from  the  controller  Is  always 
an  option.  In  such  a  system  the  question  Is  when  to  call  for  help.  In  an  autonomous  system  no  such  help  Is 
available.  In  such  a  system,  the  question  of  convergence  is  upper  most.  , n  fact,  we  show  a  final  call  tor 
help  when  the  resolution  procedures  begin  to  induce  an  increasing  number  of  conflicts.  Whether  this  will 
happen  or  not  Is  indeterminate. 

Consider  first  a  semi  autonomous  system: 

The  global  inferencing  algorithm  for  a  semi  autonomous  system  is  shown  In  Figure  H.  The  algorithm 
proceeds  In  three  steps.  The  approach  is  to  make  everv  effort  to  find  a  resolution  procedure  which  wl , I 
not  disturb  other  aircraft  (i.e.,  not  induce  other  conflicts).  In  tils  situation,  the  short  list  of 
candidates,  produced  under  the  assumption  that  the  spare  Is  sparse,  is  assumed  to  contain  a  possible 
Induced  conflict.  The  list  is  submitted  to  a  detection  procedure  which  extends  the  solutions  to  predict 
further  conflicts.  If  at  least  one  solution  exists  for  which  no  further  conflict  is  Induced,  this  Is 
presented  to  the  Controller. 
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If  all  possible  tactics  based  on  the  original  constraints  Induce  further  conflicts,  the  system 
relaxes  the  constraints  and  searches  for  new  solutions.  If  some  exist,  these  are  presented  to  the 
Controller.  If  not  the  Controller  is  asked  for  help. 

Consider  now  the  extension  to  the  autonomous  controller: 

If  the  Controller  is  not  included  in  the  Help  loop,  then  the  system  must  define  the  response  by 
further  processing.  An  inferencing  algorithm  for  this  is  shown  in  Figure  9.  The  first  procedure  orders  the 
original  short  list  to  determine  the  least  critical  induced  conflict.  The  partitioning  algorithm  Is 
assumed  here  to  create  the  minimal  perturbation  on  the  aircraft  fllghtplans  In  the  airspace.  Under  this 
assumption,  the  present  conflict  i9  resolved  ignoring  the  Induced  confllct(s);  following  which,  the 
induced  conflict  is  then  resolved  by  following  the  original  procedure.  It  is  assumed  that  the  definition 
of  'critical*  is  such  that  induced  conflicts  can  be  resolved  within  the  response  time  of  the  system. 

The  procedure  executed  in  the  first  step  of  Figure  9  could  eventually  terminate  with  a  null  set 
indicating  that,  within  the  defined  partition  of  critical  and  noncritlcal  conflicts,  no  solution  can  be 
found.  It  is  assumed  at  this  point  that  the  situation  has  become  critical  and  strategic  considerations 
must  be  abandoned  for  short  term  tactical  procedures  to  insure  safety. 

The  procedure  at  this  juncture  is  to  abandon  the  minimum  perturbation  criteria  and  partition  on  the 
bases  of  safe  passage.  The  algorithm  in  this  case  is  recursive  and  is  best  shown  as  pseudo  code.  The 
approach  shown  in  the  pseudo  code  In  Table  2  is  as  follows: 

The  list  of  preferred  tactics  Is  examined  one  by  one. 

For  each  one,  the  airspace  state  is  computed  based  on  the  projected  execution  of  the  tactic. 

The  number  of  induced  conflicts  is  then  computed.  The  critical  assumption  made  In  what  follows  is  that  it 
the  number  of  induced  conflicts  increases  the  solution  is  abandoned. 

The  procedure  continues  until  all  alternatives  are  exhausted  and  then  calls  for  help. 

The  convergence  of  this  algorithm  has  not  been  tested  against  real  data. 

5.0  Summary  and  Conclusions 

The  procedure  as  presented  was  shown  as  a  linear  sequence  of  activities.  In  fart,  there  is 
considerable  parallelism  in  the  algorithm.  The  parallel  form,  using  structure  diagrams  (from  the  Ada 
language  |li)),  can  be  used  to  find  the  parallelism.  Parts  of  the  algorithm  can  execute,  even  though  the 
results  may  not  be  used.  Thus,  for  example,  in  Figure  8,  the  second  phase  can  be  started  as  soor.  as  tin- 
selection  process  for  the  short  list  is  completed.  It  is  obvious  also  that  the  third  phase  can  be  started 
as  soon  as  the  conflicts  have  been  identified.  A  fully  Interconnected  structure  diagram  to  exhibit  all  the 
parallelism  is  straight  forward  to  develop.  The  results  offers  encouragement  that  the  computations  exhibit 
sufficient  parallelism  so  that  resolution  tactics  could  be  obtained  in  a  relatively  short  period  of  time 
(a  few  minutes)  for  reasonable  cost  (few  PCs) 

The  assumption  of  resolving  conflicts  with  a  minimal  perturbation  of  the  airspace  is  arguable.  For 
example,  other  starting  assumptions  could  lead  to  different  decision  criteria  and  the  order  of  processing. 
In  particular,  the  assumption  might  change  depending  on  the  current  density  of  aircraft  in  the  space,  or 
be  permanently  altered  In  a  tight  tactical  air  space  such  as  around  an  aerodrome.  For  our  purposes,  it 
lead  to  a  nicely  definable  resolution  procedure. 

The  convergence  of  the  algorithm  is  a  matter  of  concern  whenever  autonomous  conflict  resolution  is 
discussed.  The  algorithm  as  presented  has  not  been  tested  against  live  airspace  situations.  Thus,  the 
convergence  is  a  matter  of  conjecture  and  not  liable  to  mathemat i ca t  proof.  However,  the  resolution 
algorithm  seems  to  follow  the  procedures  used  by  Controllers,  and  intuitively  should  converge.  In 
addition,  sufficient  parallelism  exist  so  that  reasonable  computing  power  should  yield  advice  in  real¬ 
time.  The  question  always  remains  however,  as  to  a  pathological  situation  existing  In  which  the  resolution 
procedure  starts  to  converge.  In  the  end,  as  shown.  It  seems  probable  that  an  appeal  to  a  Controller  must 
be  bul It  Into  the  system. 

The  question  of  the  accumulation  of  sufficient  knowledge  to  fill  the  required  knowledge  bases  Is 
relevant.  Again  this  question  cannot  be  answered  definitively,  however,  experience  suggests  that 
Controllers  can  supply  such  information  and  that  rational  decision  can  be  made  as  suggested. 

The  implementation  of  this  algorithm  and  hence  the  answers  to  many  of  the  timing  and  convergence 
questions  depends  on  the  equivalent  parallel  representation  of  the  algorithm.  The  Implementation  could 
then  be  carried  out  using  a  multiple  processor  system  such  as  Intel's  Multibus  or  Motorola’s  VME  bus,  with 
an  appropriate  choice  of  processors,  following  the  procedures  outlined  in  [121. 

Further  work  that  is  in  progress  Includes  the  obvious  requirement  to  test  for  convergence  of  the 
algorithm  against  real  and  simulate  conflict  situations.  In  the  future,  the  parallel  version  of  the 
algorithm  can  be  constructed  and  a  suitable  architecture  devised  for  implementation  to  create  maximum 
response  in  a  dense  space.  Finally,  the  partition  of  the  data  base  and  the  optimum  relations  for  each  need 
further  study. 
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offered  valuable  suggestions  on  the  future  systems  requirements  and  the  pragmatism  of  air  traffic  control. 
This  assistance  is  gratefully  acknowledged. 
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Table  1:  Definition  of  the  Data  Sets 


G:  The  list  of  predicted  conflicts 
LI:  The  Short  List 

These  are  resolution  tactics  pr*- *  erred  l»y  the 
Controller,  the  selection  of  which  was  based  on  a  set  of 
cri ter  la . 

L2:  The  short  list  with  induced  conflicts  removed. 

L):  The  set  of  resolution  tactics  acceptable  under  relaxed 
constraints.  Note  that  LI  does  not  include  the  set  LI, 
since  LI  is  known  to  induce  conflicts. 

L4:  The  set  of  resolution  tactics  acceptable  under  relaxed 
constraints  with  all  induced  conflicts  removed. 

A:  Advice  to  the  Controller  Including  conflict  data  plus  a 

prioritized  list  of  resolution  maneuvers. 

HELP:  Conflict  data,  plus  specifics  on  what  has  already  been 
tried. 
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Function:  Reaol ve_Conflict 

;*  Assume  N  -  number  of  tactics  to  be  examined 
;*  L  «  number  of  induced  conflicts 

;*  The  algorithm  in  Figures  8  and  9  is  executed  using  the  global  procedure  names  shown 
BEGIN 

IF  S parsers  pace ( )  »  OK  THEN 
BEGIN 

Prioritize__and_compute(  ) ; 

END 

ELSE 

BEGIN 

IF(Relax_and_Delete()  -  Null)OR  (Detect_and_Remove  -  NULL)  THEN 
BEGIN 

IF  (System  »  Autonomous)  THEN  HELP(); 

ELSE 

BEGIN 

IF  (Partition_and_Detect ( )  -  NULL)  THEN 
BEGIN 

CLASS IFY(); 

Prioritize_and  ComputeO; 

Advise_ControlIer( ); 

END 

ELSE 

BEGIN 

FOR  1  -  I  TO  N  DO 
BEGIN 

;*  Compute  the  airspace  state  after  the  execution  of  the  ith  tactic 
Compute  Airspace  [ij 

;*  compute  the  number  of  induced  conflicts 
Detect  Conflicts  (LJ 
F  *  True 
Count  ■  0 

;*  This  determines  If  the  number  of  conflicts  is  growing 
Number  -  Resolve  Conflict 
IF  Number  NE  0  THEN 
BEGIN 

IF  Number  >  “  L  THEN 
BEGIN 

F  -  False 
i  -  L 
END 

Count  ■  Count  +  Number 
IF  Count  >  L  THEN 
BEGIN 

F  »  False 
I  -  L 
END 
END 
END 

;*  The  following  two  IPs  either  call  for  help  or  determine  that  a  resolution  has  been  found 
IF  i  -  N  AND  F  -  False  THEN 
NOT  Resolving,  Call  for  HELP 
IF  L  <  N  AND  F  -  TRUE 
Resolved. 

END 

END 

END 

ELSE 

BEGIN 

CLASSIFY); 

Priori tize_and_Compute( ) ; 

Advi8e_Controller( ) ; 

END 

END 

END 


Table  2:  Pseudo  Code  for  Autoooaoua  Resolution 


RULES  HEURISTICS 


IMPLEMENTABLE 

RESOLUTION 

PROCEDURES 


Figure  2  Three  Stages  in  Conflict  Avoidance 


airspace 

CONFLICT-SPEC  IflC  STATE 

DATA  DATA 


Imp  lemen  table 
Resolution 
Procedures 


EFFICIENCY  CRITERIA 

OPERATIONAL 

PREFERENCES 


Test  *  4 

Conflict  Type  Head-On 

Aircraft  A 

Aircraft  0 

ID 

Cessna 

C5A  Galaxy 

Track  Above 

not  occ 

Airspeed 

170 

400 

Track  Below 

not  occ 

Flight  Level 

ISO 

150 

Track  Ahead 

not  occ 

Attitude 

level 

level 

Track  to  Port  of  A 

OCC 

Next  haneuver 

nothinq 

nothinq 

Track  to  Starboard  of  A 

occ  I 

Priority 

avg. 

avg 

Pre-Conflict  Angle 

180  I 

Weather  Conditions 

OK  | 

Post-Conflict  Angle 

180 

to  port 

Figure  ft  Sample  Validation  Test 


Comment  s: 


1)  Unconstrained  case  -  results  depend  only  on  aircraft  characteristics 

2)  Tactic  6  failed  selection  because  it's  navigational  ability  is  low,  and  is 
unable  to  navigate  this  turn 

3)  The  priority  of  tactic  1  is  reduced  because  aircraft  A  (the  Cessna)  is 
above  it's  optimum  altitude 

4)  The  priority  of  tactic  2  is  reduced  because  the  maneuverability  of  the 

C5  A  Galaxy  is  "low  ' 

5)  The  priority  of  tactic  7  is  reduced  because  the  maneuverability  of  the 

C5A  Galaxy  is  "low-*. 


Fipure  7  Results  of  Sample  Test 


I 


APPLICATION  OF  KNOWLEDGE-BASED  TECHNIQUES  TO  AIRCRAFT  TRAJECTORY  GENERATION  AND  CONTROL 

by 

MICHAEL  W.  BIRD.  PhD 
Engineering  Fellow 

Lear  Siegler.  I nc . / I nst rument  and  Avionic  Systems  Division 
*4  141  Eastern  Avenue,  S.E. 

Grand  Rapids,  Michigan  49518-8727  USA 


SUMMARY 

A  concept  that  embeds  knowledge-based  techniques  in  a  trajectory  generation  and 
control  system  is  defined.  The  system  concept  is  called  the  Unified  Trajectory  Control 
System  (UTCS).  The  objective  of  this  system  is  to  aid  the  pilot  when  operating  in  the 
intense  threat  environment  projected  for  the  1990's. 

The  UTCS  has  an  architecture  of  independent  trajectory  generation  elements  whose 
operations  are  integrated  by  a  knowledge-based  system.  This  Artificial  Intelligence 
(AI)  technique  utilizes  production  rules,  an  inference  engine,  and  a  system  of  frames 
for  communicating  with  the  trajectory  generation  elements.  Separate  trajectory  genera¬ 
tion  elements  are  utilized  for  terrain  follow ing/terrain  avoidance,  threat  avoidance, 
weapon  delivery,  obstacle  avoidance,  and  mission  planning.  The  role  of  the  knowledge- 
based  system  within  the  UTCS  is  defined  and  the  various  components  of  the  system  are 
described  including  the  structure  of  production  rules,  the  inference  engine  mechaniza¬ 
tion,  the  types  of  problem-solving  knowledge  needed  in  the  rule  base,  and  the  frame 
system  architecture.  The  various  uncertainties  in  the  UTCS  are  described  and  the  need 
for  a  method  to  account  for  these  uncertaint  ies  as  part  of  the  know  ledge -based  tech¬ 
niques  is  identified.  A  simulation  of  the  system  developed  using  the  LISP  and  FORTRAN 
computer  languages  on  a  VAX  8600  computer  is  described. 


BACKGROUND 

The  missions  of  the  1990’s  will  place  requirements  on  pilots  and  crews  not  seen  in 
the  past.  Our  aircraft  operators  will  be  facing  ground-based  and  airborne  defensive 
systems  that  are  sophisticated,  extremely  lethal,  and  operating  cooperatively  to  in¬ 
crease  their  effectiveness.  This  threat  environment  will  be  dense,  mobile,  and  unpre¬ 
dictable,  thereby  increasing  the  number  of  unexpected  events  occurring  during  the  mis¬ 
sions.  These  events  will  include  encountering  unexpected  threats,  detecting  unknown 
obstacles  when  flying  at  low  altitudes,  incurring  damage  to  the  aircraft  and  systems 
caused  by  the  threats,  and  changing  mission  directives  to  accommodate  the  dynamics  cf 
t  he  bat  t  le. 

The  pilot  has  always  had  to  handle  unexpected  and  unplanned  events  during  the 
mission.  The  difference  in  the  future  is  these  events  will  be  happening  at  a  faster 
rate  because  of  the  higher  threat  density.  This  compresses  the  amount  of  time  the 
Pil'd  has  to  make  decisions.  These  decisions  will  be  more  difficult  because  of  the 
large  number  of  threats  plus  the  pressure  to  complete  each  mission  in  a  fast  paced  war. 
The  decision  making  problem  faced  by  the  pilot  and  crew  is  characterized  as  follows:  1) 

time  compression  -  events  happening  rapidly  and  demanding  quick  decisions  and  control, 
2)  lots  "f  surprises  -  events  that,  were  not  anticipated  during  mission  planning  and 
must  tie  handled  in  real-time,  and  3)  conflicting  goals  -  situations  where  goals  as¬ 
sociated  with  the  mission,  sur v i vab i 1 i t y ,  and  human  factors  conflict  with  each  other. 

One  way  to  increase  the  pilot's  and  crew’s  effectiveness  in  these  projected  mili¬ 
tary  environments  is  to  provide  real-time,  comprehensive,  and  accurate  information  to 
the  cockpit  -  information  depicting  the  situation  outside  and  inside  his  aircraft. 
Sensors,  communication  systems,  diagnostic  systems,  and  cockpic  interface  devices  are 
being  developed  to  provide  information  the  pilot  can  use  for  assessing  his  situation. 
However,  providing  more  information  to  the  pilot  or  crew  is  not  the  complete  solution 
for  pilot  decision  aiding.  The  pilot  will  often  not  have  sufficient  time  to  adequately 
analyze  the  information  and  select  effective  actions.  And,  t>  complicate  the  problem, 
quick  and  accurate  decisions  will  be  required  during  critical  situations  involving  rapid 
occurrences  of  dangerous  events  and  requiring  complex  trade-offs.  What  is  needed  are 
computers  that  process  the  situation  assessment  information  and  derive  data  that  aids 
the  pilot  in  makinq  decisions. 

INTRODUCTION 

A  concept  for  pilot  decision  aiding  is  described  in  this  paper.  The  concept  has  an 
on-board  computer  system  computing  one  or  more  desirable  aircraft  trajectories  for  the 
pilot  and  controlling  the  aircraft  to  the  trajectory  selected  by  the  pilot.  The  concept 
is  called  the  Unified  Trajectory  Control  System  (UTCS).  To  be  effective  as  a  pilot 
decision  aid,  UTCS  will  need  a  number  of  capab i 1 i t ies : 

•  The  trajectories  will  need  to  be  computed  to  anticipate  the  approaching  situa¬ 
tion,  where  mission  planning  knowledge  will  be  used,  and  to  respond  in  real¬ 
time  to  unexpected  events  occurring  in  the  actual  situation.  (To  anticipate 
the  approaching  situation,  mission  planning  knowledge  will  be  used.) 


•  These  trajectories  must  be  computed  with  the  fidelity  needed  for  flight  con¬ 
trol  and  have  the  reliability  necessary  for  flight  safety. 

•  The  trajectories  need  to  avoid  known  threats,  evade  detected  threats  either 
before  or  after  weapon  launch,  avoid  unexpected  obstacles  during  low-level 
flight,  account  for  aircraft  performance  degraded  by  equipment  failure  or 
battle  damage,  and,  when  necessary,  deviate  from  the  mission  plan  in  such  a 
way  that  still  accomplishes  mission  objectives  as  best  as  possible.  For 
threat  evasion,  the  UTCS  needs  to  evaluate  the  use  of  aircraft  maneuvers, 
terrain  masking,  countermeasures,  weapons,  or  a  combination  of  these  for 
countering  the  threat. 

•  Preferences  about  the  trajectory  inserted  by  the  pilot  into  the  system  need  to 
be  accommodated  in  the  trajectory  calculat ions. 

•  The  various  uncertainties  and  inaccuracies  in  the  information  utilized  in  the 
system  must  be  accounted  for  in  the  UTCS  calculations. 

•  In  making  trade-offs  between  conflicting  goals,  the  UTCS's  decision  making 
logic  must  be  compatible  with  the  pilot's. 

The  complexities  of  the  problem  being  solved  by  UTCS  rule  out  a  straightforward 
application  of  conventional  trajectory  optimization  techniques.  These  techniques  are 
numeric  in  nature,  i.e.,  the  problems  being  solved  are  modeled  with  variables  having 
numbers  as  values  and  the  problems  are  solved  with  equations  and  logic  that  operate 
primarily  on  numeric  valued  variables.  The  algorithms  used  in  these  techniques  are 
derived  principally  from  analytical  methods  including  non-linear  optimal  control, 
singular  perturbation  theory,  and  dynamic  programming.  The  current  versions  of  these 
numeric-based  algorithms  have  been  applied  to  trajectory  optimization  problems  involving 
a  few  performance  criteria.  However,  when  there  are  more  than  a  few  criteria,  or 
trajectory  goals,  and  when  human  expertise  needs  to  be  built  into  the  system  to  handle 
conflicts  between  criteria,  a  single,  analyt ically-based  trajectory  optimization  algo¬ 
rithm  is  extremely  difficult  to  develop. 

The  integration  of  know  ledge- based ,  Artificial  Intelligence  techniques  with  a 
number  of  numeric-based  trajectory  optimization  algorithms  is  the  approach  used  in  the 
UTCS  concept.  Artificial  Intelligence  concepts  have  been  applied  to  a  variety  of  chal¬ 
lenging  problems  in  recent  years.  From  these  applications  has  evolved  a  set  of  tech¬ 
niques  for  symbolically  representing  human  expertise  or  knowledge.  Symbolic  repre¬ 
sentations  have  an  advantage  over  purely  analytical  methods  for  representing  human 
expertise.  They  are  useful  for  heuristics  or  "rules  of  thumb"  used  to  simplify  the 
numerical  calculation  of  solutions  to  problems. 

Many  Artificial  Intelligence  systems  rely  primarily  on  symbolic  representations  and 
processing.  This  is  in  contrast  to  UTCS  which  uses  both  symbolic  and  numeric  proces¬ 
sing.  Symbolic  representations  do  not  have  the  fidelity  needed  for  many  of  the  trajec¬ 
tory  computations.  This  is  why  numeric-based  algorithms  are  utilized  in  UTCS.  The  UTCS 
concept  uses  a  number  of  numerical  trajectory  generation  algorithms  with  each  algorithm 
computing  trajectories  for  a  few  trajectory  performance  criteria.  UTCS  integrates  these 
algorithms  with  the  symbolically  oriented  Artificial  Intelligence  techniques. 

The  Artificial  Intelligence  techniques  used  in  the  UTCS  concept  have  been  success¬ 
fully  used  in  other  AI  applications.  They  are  combined  with  reasonable,  mature,  trajec¬ 
tory  optimization  algorithms.  This  combination  offers  the  potential  of  yielding  a 
system  that  is  realizable  in  the  near  future. 

This  paper  describes  the  UTCS  concept  that  has  been  developed  during  an  Ai:  Force 
Flight  Dynamics  Laboratory  sponsored  program  [1]*.  The  description  includes  the  fol¬ 
lowing:  a  functional  description  of  the  concept,  the  numeric-based  trajectory  optimiza¬ 

tion  algorithms,  the  Artificial  Intelligence  techniques  employed  in  the  concept,  the 
type  of  knowledge  needed  for  the  system,  and  the  progress  made  in  simulating  the  con¬ 
cept.  The  paper  concludes  by  describing  what  additional  efforts  are  needed  for  further 
developing  the  concept. 

UTCS  FUNCTIONAL  ARCHITECTURE 

The  UTCS  has  the  two  basic  functions  of  a  trajectory  control  system  -  trajectory 
generation  and  trajectory  tracking.  The  trajectory  generation  function  calculates  the 
trajectory  that  is  desirable  for  the  aircraft  to  fly  [2'.  The  trajectory  tracking 
function  computes  commands  for  the  flight,  control  system  and  quidance  cues  for  the  pilot 
to  follow  the  desired  trajectory. 

For  trajectory  generation,  the  UTCS  approach  employs  a  number  of  trajectory  genera¬ 
tion  modules  where  each  module  computes  a  particular  type  of  trajectory.  Because  each 
trajectory  generation  module  has  a  specialty,  the  modules  are  referred  to  as  trajectory 
specialists.  The  specific  trajectory  specialists  are  discussed  below,  but  examples  are 
terrain  f ol low ing/terrain  avoidance,  obstacle  avoidance,  and  weapon  delivery.  Employing 
trajectory  specialists  allows  the  trajectory  generation  problem  to  be  distributed  among 
the  specialists.  Each  specialist  has  its  domain  of  experl ise,  a  few  trajectory  optimi¬ 
zation  criteria,  and  its  own  optimization  technique  for  computing  optimum  trajectories. 

Numbers  in  brackets  designate  references  at  end  of  paper. 
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With  this  approach,  the  total  set  of  trajectory  goals  (criteria)  are  distributed  among 
the  various  specialists.  These  specialists  jointly  contribute  to  the  total  solution  of 
the  trajectory  problem. 

In  the  UTCS  architecture,  the  task  of  integrating  the  specialists'  operations  is 
handled  by  a  separate  module,  the  Trajectory  Decision  Maker  (TDM).  This  module 
schedules  the  specialists'  processing,  makes  trade-offs  between  conflicting  trajectory 
criteria,  and  blends  the  individual  trajectory  specialists'  outputs  together  into  full 
trajectory  solutions  for  the  aircraft.  Knowledge-based  techniques  are  used  for  the  TDM. 

Figure  1  illustrates  the  UTCS  functional  architecture  showing  the  trajectory 
specialists  and  the  Trajectory  Decision  Maker.  Shown  in  the  figure  is  a  direct  inter¬ 
face  between  the  specialists  and  the  sensors,  weapons,  and  data  bases  that  the  special¬ 
ists  need  to  accomplish  their  particular  task.  Since  the  TDM  is  involved  in  the  higher- 
level  decision  making  aspect  of  the  problem,  it  does  not  need  the  same  level  of  informa¬ 
tion  detail  from  the  sensors,  weapons,  and  data  bases  as  the  specialists.  Therefore,  an 
interface  to  the  TDM  is  not  shown  on  the  architecture  diagram. 

Figure  1  also  shows  the  trajectory  tracking  function  of  the  UTCS,  which  is  com¬ 
prised  of  the  Predictive  Path  Control  and  inner  loop  control  laws.  The  TDM  feeds  the 
desired  trajectory  to  Predictive  Path  Control  for  the  tracking  operation.  Predictive 
Path  Control  is  an  advanced  control  technique  that  has  been  developed  as  part,  of  the 
UTCS  program.  A  feature  of  this  control  technique  is  accurate  trajectory  tracking  of 
the  dynamics  in  the  commanded  trajectories.  This  is  accomplished  in  this  technique  by 
continually  predicting  the  best  set  of  controls  for  the  immediate  trajectory  future  (2). 


UTCS  FUNCTIONAL  PARTITIONING 
FIGURE  1 

Another  element  of  the  UTCS  concept  shown  in  Figure  1  is  Aircraft  Model  Learning. 
The  other  UTCS  elements  -  the  trajectory  specialists,  the  TDM  and  the  Predictive  Path 
Control  -  require  accurate  information  about  the  current  aircraft  aerodynamic,  pro¬ 
pulsion,  and  control  capabilities.  This  is  the  role  of  Aircraft  Model  Learning.  This 
UTCS  element  will  update  models  and  any  other  types  of  representations  of  aircraft 
capabilities  that  are  utilized  in  the  other  UTCS  elements.  ^he  updating  is  especially 
critical  when  on-board  subsystems  degrade  in  performance  or  fail  and  when  there  is 
damage  to  the  aircraft.  The  module  will  utilize  data  from  sensors,  predicted  aircraft 
trajectories,  and  subsystems  BIT  (Built-In  Test)  and  diagnostic  systems.  A  combination 
of  system  identification  and  performance  estimation  techniques  will  be  used  in  Aircraft 
Model  Learning  for  processing  this  data. 

Knowledge-based  techniques  will  be  used  in  all  elements  of  UTCS,  not  just  in  the 
Trajectory  Decision  Maker,  to  provide  the  flexibility  needed  for  the  aircraft  to  operate 
in  the  hostile  environment  described  above.  However,  the  initial  development  of  the 
UTCS  concept  emphasized  applying  knowledge-based  techniques  to  the  TDM  and  its  integra¬ 
tion  with  the  trajectory  specialists.  Consequently,  the  remainder  of  this  paper  is 
devoted  to  describing  the  TDM,  the  trajectory  specialists,  and  their  combined  operation. 


TRAJECTORY  SPECIALISTS 


Low  altitude  flight  in  the  presence  of  threats  is  most  demanding  in  terms  of  the 
rate  of  unexpected  events  and,  consequently,  the  needs  of  a  trajectory  control  system 
for  pilot  aiding.  This  type  of  mission  segment  was  used  to  develop  the  UTCS  concept. 
The  trajectory  specialists  selected  for  this  mission  are  shown  in  Figure  1.  Their 
functions  are  as  follows: 

1.  Terrain  for  low  altitude  trajectories  optimized  with  respect  to  the  terrain. 

2.  Threat  for  trajectories  and  countermeasure  usage  that  maximize  sur vi vabi 1  a t y 
against  threats  affecting  the  aircraft's  current  operation. 

3.  Obstacle  for  trajectories  avoiding  unexpected  obstacles. 

4.  Combat  for  delivering  weapons  against  targets  or  threats. 

5.  Mission  for  in-flight  planning  of  new  mission  trajectories.  This  involves 
computation  of  long  term  trajectories  that  meet  mission  objectives  while 
maximizing  survivability  against  anticipated  threats. 

6.  Recovery  for  recapturing  the  current  planned  mission  when  deviations  from  the 
mission  plan  occur. 

?.  Predictive  Path  Control  (PPC)  for  predicting  the  aircraft  trajectory  that  will 
result  when  the  TDM  supplies  a  desired  trajectory  to  the  trajectory  tracking 
function.  The  PPC  was  described  earlier  as  a  part  of  the  trajectory  tracking 
function,  but  it  is  also  employed  as  a  specialist  in  the  UTCS  concept.  The 
predicted  trajectory  the  PPC  computes  when  in  the  specialist  role  accounts  for 
the  control  actions  of  the  PPC  (when  operating  as  a  controller),  the  effects 
of  the  inner  loop  control  laws,  the  aircraft  aerodynamics,  and  the  propulsion 
system. 

8.  P i lot  for  incorporating  the  pilot’s  trajectory  preferences  and  constraints. 
This  specialist  keeps  track  of  the  trajectory  preferences  the  pilot  makes  as 
the  flight  progresses  and  supplies  these  pilot  desires  to  the  TDM.  This 
specialist  is  not  a  model  of  the  pilot  and  is  not  an  attempt  to  emulate  his 
cognitive  process,  but  is  a  mechanism  that  feeds  pilot  preferences  «.»r  demands 
about  the  trajectory  into  the  trajectory  decision  making  process.  These  pro* 
ferences  are  expressed  by  the  pilot  through  the  control  display  interface. 

The  UTCS  function  is  generating  the  desired  near-term  trajectory  for  the  aircraft. 
A  near-term  trajectory  originates  from  the  aircraft  current  state  and  is  defined  oyer  a 
reasonable  length  of  time  in  the  future.  Consequently,  all  trajectory  specialists, 
except  the  mission  specialist,  compute  near-term  trajectories  and  are  concerned  with 
satisfying  the  trajectory  goals  for  the  local  situation  effecting  t  tie  aircialt.  How¬ 
ever,  UTCS  must  also  consider  how  the  near-term  trajectory  affects  the  future  pa; t s  d 
the  mission.  This  is  the  role  the  mission  specialist  plays. 

Predictive  Path  Control  has  a  unique  role  as  a  specialist.  When  t  tie  TDM  <;  ves  the 
PPC  a  potential  desired  trajectory  computed  by  t  tie  other  specialists,  the  PPC  feeds  h<v  k 
to  the  TDM  the  effects  the  control  system  and  aircraft  dynamics  will  have  n  the  trajec¬ 
tory.  This  allows  the  TDM  to  evaluate  the  effects  of  control  actions  bef'-re  •  ■<  m  i  •  »  :  t .  • : 
to  a  desired  trajectory.  This  capability  is  important  for  the  UTCS  to  re'»t  M:uM 
safety  standards. 

Many  of  the  trajectory  generation  algorithms  that  can  be  used  in  the  trajectory 
specialists  have  already  been  developed.  Terrain  followinq/teirain  avoidance  algorithms 
[5]  can  be  used  for  the  Terrain  specialist  and  weapon  delivery  algorithms  j o ;  1 ui  t he 

Combat  specialist.  Route  planning  algorithms  have  been  recently  developed  tot  Missun 
Planning  (  2J.  Of  all  the  specialists,  the  least  developed  specialist  is  Threat.  '!  h  i ;; 
specialist  computes  the  near-term  trajectory  and  recommended  '-ount  o  measure  usao*-  ♦ 
avoid  known  threats  while  evading  detected  threats. 

TRAJECTORY  DECISION  MAKING  AND  TRAJECTORY  SPECIALISTS’  OPERATIONS 

The  trajectory  specialists  compute  their  own  individual  * r a ject or  j es ,  while  t he  :  :  V 
manages  the  s  pec i a  1 i s  t  s ’  computations  to  establish  complete  trajectories  f  ha  t  test 
satisfy  all  trajectory  goals.  In  managing  the  specialists,  the  TDM  performs  a  number  -d 
operations.  The  TDM  decides  which  spec lal i st s  should  conti  ibute  to  the  desired  trajec¬ 
tory,  based  on  events  occurring  both  external  and  internal  *o  the  aunalt.  It  combines 
the  individual  outputs  of  the  trajectory  specialists  into  composite  candidate  trajec¬ 
tories  that  attempt  to  satisfy  all  factors  affecting  the  aircraft  trajectory.  The  TJ'M 
analyzes  these  candidates  to  establish  if  any  satisfy  all  the  trajectory  factors.  it 
conflicts  between  factors  need  to  be  resolved,  and  if  trajectory  improvements  are  re¬ 
quired.  To  resolve  conflicts  or  improve  the  candidates,  the  TDM  reschedules  the 
specialists  with  different  weightings  on  the  specialists’  optimization  a  iter ra  and/or 
different  constraints  on  the  specialists’  solutions.  Whenever  the  specialists  generate 
their  individual  trajectory  solutions,  new  composite  candidates  are  created  and  t  tie  TDM 
analyzes  the  results  to  determine  the  next  actions  in  the  process  of  determining  a 
desired  trajectory.  This  process  of  searching  for  desired  trajectory  solutions  is  an 
iterative  process  involving  one  or  more  specialists  at  each  step  and  managed  by  the  TDM. 


When  the  TDM  has  determined  one  or  more  candidate  trajectories  that  best  satisfy 
all  trajectory  goals,  the  desired  trajectory  that  will  be  input  to  the  trajectory 
tracking  function  must  be  selected  from  these  candidates.  The  method  of  selection  will 
depend  on  how  the  UTCS  is  integrated  with  the  pilot’s  operations  in  the  cockpit.  In  one 
method,  UTCS  provides  the  most  promising  candidate  trajectories  to  the  pilot,  via  drs- 


plays,  who  selects  the  desired  tiajectuiy.  Another  method.  which  nay  t  used  :  t.  •  -  »• « • 
critical,  high  workload  s  i  t  ua  t  ions,  has  *  he  TPM  select  the  he  s  *  c  a  nd  .  ■  i  a  t  «■*  and  ■ 

mat  ically  feeding  it  t  o  the  trajectory  tracking  function  with  n  i  n  i  n :  a  1  •  r  n  ■  pil'd 

involvement.  It  is  anticipated  that  the  select  ion  method  will  var  v  dor  .  ng  f  tie  i  s*  i  ■  <r 
and  depend  on  what  events  are  occurring  and  the  level  • . t  prior  workload. 


Computing  aircraft  trajectories  with  independent  trajectory  specialists  whose  pt* 
rations  are  integrated  and  managed  t>  y  the  TPM  is  t  tie  trajectory  gene  rat  cm  a.  f 

the  UTCS.  When  addressing  the  development  of  this  concept  tor  reui-t  ;  •  ,  a;  rn<  in** 

application,  there  is  concern  that  the  iterative  search  pr  "'ess  described  at/*  ve  will 
require  unrealistically  large  computer  throughput.  An.  th»*r  •  >  n  ■  e.n  .  h  *  hat  'here  w  .  1  i 
be  considerable  inefficiency  in  the  translation  bet  wen  *  he  trajectory  sp«*'ic»l  is' 
numerical  representations  and  the  symbol  i**  representations  of  the  Artificial  Intel  1*- 
gence  techniques.  To  address  these  concerns,  fw  feat  ur»»s  wore  rp  ■'  «!•*•:  *  h-»*  '■  • 

specialists'  concept. 

One  feature  is  having  the  specialists  generate  arse,  1  ■  -w  :*•*•  li,t  mr. ,  al-stia.  • 
representations  of  trajectories  when  the  TPM  is  exp  1  >  r  :  n*i  pr-'p  ;sm<i  trajet  ry  and  : 
dates.  This  allows  the  TDM  to  quickly  examine  many  'Miu:  :dat »:  solut  ions.  When  pi  •  .  s  ;io 

candidates  have  been  established,  the.  TIM  has  •  tie  spe- •  i  a  I  i  s»  s  refine  *  he  .  and  .  dot  et- 
fine,  de  t  a  i  1  ed  calculat  ionf5  ot  the  t  r  a  jec  f  nr i  e  s .  This  h*,it  uro  :  ••  :  .  .  i  e  s  '  l.-d  ’  e 
specialists  compute  both  coarse,  macroscop  i  .•  represent  at  -  r>s  and  line,  detailed  ivpje 
sentations  of  their  trajectory  solutions.  Furthermore,  *  he  specialists  will  n*-»-d  '  • 

generate  the  coarse,  low  resolution  trajectories  significantly  tastei,  and  with  .ess- 
computer  speed  requirements,  than  the  t  hip,  dr-t  ailed  tra  j**r' .  r  les. 


The  second  feature  of  the  internal  i  -n  appt  *»ach  is  language  i>  i  represent  . 
aircraft  trajectories.  The  language  is  needed  t  •  provide  a  t  ra  ie -t  • y  r  epr  at  ; '  '• 

common  to  all  specialists,  plu^  a  means  for  t  h*-m  t«<  •  mr.ur,  i  *-at  e  off;-  lent  ly  w  1 1  I.  the 

TDM.  This  language  needs  to  be  synbni  f  >  .r  the  --oarse  t j a  ioc* m  «es  and  nwreri--  I'd  r  o- 
detailed  trajectories.  The  symbolic  language  pr .  voles  off  i*  :e»t  pi  cess  mu  *  t  he 

trajectory  information  by  the  TDM's  Artificial  Intelligence  techniques  where  m.  wiod.jc 
about  significant  trajectory  attributes,  trade-*  ft's.  and  the  spfv :  a  i  sf  s 1  char  «•»..*  or  - 
istics  is  defined  symbolically.  The  nurier  ir  representation  provides  the  accuracy  n**«-dec 
tor  factors  such  as  aircraft  dynamics,  terrain  -r\st  i  a  :  n '  s.  .ml  *hm*af  vorauc. 


TRAJKCTORY  DECISION  MAKER 


Figure  2  shows  the  major  modules  <  t 
Artificial  Intelligence  techniques  used  in 
t  ion  rule  system  and  a  frame  system.  The 
system  with  the  trajectory  specialists. 


♦  he  Traie.-f-  iv  i  .  i  s  i <  gi  Maker-  and  M.e  »  v- 
the  TDM .  These  two  techniques  are  a  jr-duc- 
t  r  a  me  system  interfaces  the  p.  ••du-  *  on  ini*- 


TRAJECTORY  DECISION  MAKER 


FIGURE  2 
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As  shown  in  Figure  2,  the  production  lule  systein  has  a  know  i«*dge  ba^>*,  -i  sot  ot 
rules,  a  list  of  tacts,  and  an  inference  engine.  The  tact  list  contains  .nt  -ir,a!  ion 
about  the  local  situation  and  facts  describing  t  tie  current  state  <>f  the  TPM  trajectory 
search  process.  The  inference  engine  matches  the  tact  s  and  trajectory  i  ni m  mat.  i  <>n  fi-M' 
the  frame  system  to  the  set  nt  rules  and  selects  a  rule  t«>  activate  or  "Mr*-".  A  rule 

firing  can  have  a  number  of  results:  a  I  art  or  facts  can  tie  added  t-  or  'spoa*  ed  :  n  •  he 

fact  list,  objects  or  data  in  the  frames  rati  be  mod  if  red,  new  frames  ran  be  u.rt  mi: 

ated,  and  trajectory  specialists'  operations  can  be  iriit  i  cited.  The  mteren..  •>  engine 

processing  is  iterative.*  a  match  against  the  rulo  base,  a  ru.e  tiring,  an  d  her  iule 

base  match  now  with  the  revised  fact  list  and/or  frames,  anothei  rule  tiring,  and  this 
continues  until  a  rule  tiring  terminates  the  process.  !t  is  -  r  it  i;-dl  *  fiat,  ri  >•,  -i>  put a  - 

tionally  efficient  procedure  be  used  for  this  processing.  Note:  the  sirclat  n  ot  *  he 

TDM  enqine  used  a  forward  chaining  approach  f,.»  pr«  x'ttss  i  rig  the  rules. 

There  is  a  dist  ;n<  t  ion  between  the  product  on  rule  syslert  used  in  t  he  TIM  ,-m-i  the 
typical  production  rule  system  which  involves  just  a  rule  nase  and  tact  ;  ;  •>  t  ,  }  r  *  *-,r- 
TDM,  information  from  the  frame  system  is  also-  processed  m  c,-i,  junct  :  01,  w;i  I;  tin*  in  • 
list.  This  difference  results  in  a  specialised  struct  we  tor  t  ne  tui***  t  ii.it  .n  iiult.-. 
both  tacts  and  frame  data. 

The  general  IF-THFN  rule  stricture  that  has  been  ;t  ili.:e<|  in  the  kn -.w  ledge  bases  1  \ 
many  production  rule  systems  1  i  \  was  used  for  developing  and  s  . .  >u  1  af  i  ng  t  he  'MM  •  .n«-ept. 

However,  since  the  TDM  rules  ate  expressed  in  terms  <  ■  t  both  symbolic  (,ii  t>,  and  .-.yrr  <  i  i  ■  ■ 

and  numerical  trajectory  descriptions  t  roin  t  fie  frame  systeti.,  an  Ir-IHSi.  rule  structure 
was  specifically  developed  tor  the  TPM. 

The  IP  part  of  each  rule  consists  of  a  list  of  paMeir;  clauses  and  a  list  d  test 

clauses.  The  pattern  clauses  are  symb.-lic  expressions  inv-.lv  mu  t  fie  I  a-  t  s  in  t  fie  fact 
list  and  can  include  pattern  variables.  The  test  clauses  involve  pr  imar  ily  the  symbolic 
and  numeric  data  from  the  f  ames  and  are  composed  ot  1  rare  access  fund  i<  ns  t  ■:  i  ex¬ 
tracting  information  f  ton  t  fie  trar.es  and  auxiliary  Junctions  tm  processing  the  fact 

list.  Including  test  clauses  in  t  fie  IF  pai  t  <-i  the  rules  was  necessary  t  -r  t.  tie  TPM 
applicati  n  sc  the  rules  could  be  expressed  i  ri  terms  ot  the  trajectory  specialists* 
outputs  without  having  *  c  convert  t  tie  specialists'  outputs  info  facts  for  the  fact  list. 

The  THE N  part  '  t  a  rule  def  ines  act  i-'ds  t  be  takers  when  a  rule  is  tired  and 

■■•nsists  of  f  unct  i.-ris  tor  man  i  pu  1  at  i  no  the  facts  m  the  f  act  list,  data  in  the  frames, 
and  peraticns  of  r  fie  inference  engine.  In  add  1 1  i-m  t<  the  IK-'IfiF.N  parts,  a  third  part 
ot  the  TDM  rule  structure  is  a  rule  confidence  value,  i.e.,  a  mine’  i-'al  parameter 

del  ining  confidence  i  n  t  fie  rule.  Attaching  confidence  values  t<>  rules  was  part  ot  a 

method  used  when  Simula’  ing  the  TDM  t"  account  tor  uncertainties  in  the  information 
processed  by  the  TDM. 

A  pat t  of  the  inter  once  engine  that  significant  ly  affects  the  behavior  t  a  pil¬ 
in'  t  ion  rule  system  and,  therefore,  the  hehti  I'm  of  t  tie  TIM  is  the  conflw-t  r  esc  1  ut.  i  'in 
strategy.  This  is  the  strategy  the  inference  engine  uses  for  selecting  t  fie  rule  to  tire 
from  t  fie  set  of  rules  whose  II'  conditions  match  t  fie  fact  list  and  frame  data.  In 
developing  the  TDM  concept,  a  number  ot  needs  w  is  established  fur  the  conflict  resolu¬ 
tion  s*  r at egv. 

First,  the  conflict  resolut  ion  strategy  must  be  changeable  for  different  TDM  opera- 
t  ions.  For  example,  the  operation  of  deciding  which  tram'',  ory  specialists  to  employ 
needs  a  conflict  resolution  strategy  different  than  for  the  operation  of  evaluating  the 
desirability  of  each  candidate  trajectory.  To  he  able  to  change  the  conflict  resolution 
strategy  implies  that  the  THEN  part  of  a  rule  should  be  able  to  specify  the  strategy 
being  used  by  the  inference  engine. 

Second,  the  methods  lor  conflict  resolution  must  include  the  processing  needed  to 
make  decisions  in  the  presence  ot  uncertainty.  The  types  of  uncertainties  and  inac¬ 
curacies  present  in  the  UTCS  that  will  influence  the  trajectory  decisions  are  described 
in  a  later  section.  These  uncertainties  and  inaccuracies  need  to  be  accounted  for  in 
the  process  of  selecting  the  rules  to  fie  fired. 

When  simulating  the  TDM  inference  engine  during  the  UTCS  pioject,  a  technique  based 
on  the  certainty  factor  propagation  method  developed  as  part  of  the  MYCIN  medical 
diagnosis  research  work  (4,7)  was  used  to  account  for  uncertainty.  In  tins  technique, 
each  fact  in  the  fact  list  has  a  certainty  factor  which  is  a  number  depicting  its 
certainty.  The  inference  engine  uses  the  certainty  factors  attached  to  facts  for  com¬ 
puting  a  certainty  value  for  each  rule  whose  IF  conditions  match  the  fact,  list  and  frame 
data.  The  inference  engine  computes  this  rule  certainty  based  on  the  certainty  factors 
of  the  facts  in  the  rule  IF  condition  and  the  rule  confidence  value.  These  rule  cer¬ 
tainty  values  can  be  used  in  conflict  resolution  methods  ’for  determining  which  rule  to 
fire.  Two  conflict  resolution  methods  based  on  rule  certainty  values  were  used  in  the 
TDM  simulation.  One  method  fired  the  rule  with  maximum  certainty,  while  the  other 
method  prevented  from  firing  any  rule  helow  a  certainty  threshold.  The  last  step  of  the 
certainty  factor  technique  occurs  when  a  rule  is  fired.  I’he  certainty  factor  of  each 
fact  in  the  THEN  part  ot  the  rule  is  computed  based  on  the  rule  certainty  and  the 
previous  value  of  the  fact. 

Third,  the  conflict  resolution  strategy  needs  to  be  mechanized  as  a  hierarchy  of 
conflict  resolution  methods.  In  the  strategy,  each  method  is  assigned  a  priority.  The 
inference  engine  applies  the  methods  in  order  of  priority  with  each  method  narrowing  the 


set  of  potential  rules  for  firing  until  one  is  fired. 

TDM  KNOWLEDGE  BASE 


\ 


The  TDM  rule  base  will  have  the  knowledge  needed  for  managing  the  trajectory 
specialists  and  using  the  specialists*  outputs  to  develop  desirable  trajectories.  The 
rule  base  will  have  heuristics  for  the  following:  deciding  how  to  respond  to  unexpected 
events,  what  specialists  to  schedule,  when  to  schedule  them  and  what  inputs  to  provide 
to  them,  evaluating  the  specialists'  outputs,  priorities  on  conflicting  trajectory 
goals,  trade-offs  between  trajectory  goals  as  a  function  of  the  external  and  internal 
environment,  and  changes  to  make  to  the  specialists'  inputs  to  improve  a  candidate 
trajectory’s  desirability.  The  expertise  needed  for  developing  this  TDM  knowledge  base 
will  need  to  be  derived  from  a  combination  of  pilots,  military  mission  analysts,  and 
engineers  with  intimate  knowledge  of  the  trajectory  specialists'  algorithms. 

The  UTCS  project  was  an  exploratory  development  program,  so  resources  were  not 
available  to  develop  a  complete  knowledge  base.  However,  a  prototype  rule  base  was 
developed  and  simulated.  To  assist  in  developing  this  rule  base,  a  basic  approach  tor 
solving  the  TDM  problem  was  established.  Figure  3  defines  the  steps  in  this  approach. 
These  steps  are  described  next. 


PROBLEM  SOLVING  APPROACH 
FIGURE  3 

Determine  Important  Factors.  This  first  step  starts  the  problem  solution,  occurring 
whenever  a  new  trajectory  computation  is  needed.  The  UTCS  as  a  real-time,  on-board 
system  will  be  making  trajectory  computations  as  the  aircraft  flight  progresses,  both 
periodically  and  whenever  unexpected  events  occur.  Many  of  the  trajectory  computations 
will  be  updates  to  the  previously  selected  desired  trajectory.  However,  when  unantici¬ 
pated  changes  occur  in  the  current  situation,  the  trajectory  computations  likely  will 
result  in  recommendations  for  or  selection  of  a  new  desired  trajectory.  This  step  in 
the  problem  solving  approach  determines  what  factors  are  .  nportant  in  the  current  tra¬ 
jectory  computation.  Examples  of  important  factors  are  new  events,  such  as  a  newly 
detected  threat  or  temporary  loss  of  a  control  element,  and  past  trajectory  decisions, 
such  as  a  decision  to  attack  an  air  threat  or  type  of  obstacle  avoidance  maneuver. 

Define  Search  Strategy.  Based  on  the  important  factors,  the  TDM  establishes  a  strategy 
for  determining  candidate  trajectories  during  the  computational  cycle.  There  are  at 
least  three  strategies:  1)  breadth- f i rst ,  which  is  used  when  unexpected  events  occur 
dictating  a  search  for  new  desired  trajectories  that  may  differ  significantly  from  the 
current  trajectory,  2)  depth-first,  which  is  used  when  tneie  have  been  minor  changes  in 
the  situation,  i.e.,  updated  threat  information  or  minor  aircraft  deviations  from  the 


desired  trajectory,  requiring  only  refinements  to  the  current  desired  trajectory,  and  j) 
trajectory  extension,  which  is  used  when  there  have  not  been  any  significant  changes  to 
the  situation  and  the  desired  trajectory  needs  only  to  be  extended  because  of  aircraft 
progress  along  the  path. 

Define  Initial  Candidate  Trajectories.  The  TDM  establishes  which  specialists  to  employ 
for  generating  an  initial  set  of  candidate  trajectories.  A  candidate  can  be  a  trajec¬ 
tory  from  a  single  specialist  or  a  composite  trajectory  formed  by  trajectories  from 
different  specialists.  Characteristics  of  the  current  situation,  new  events  that  have 
occurred,  decisions  made  in  past  computation  cycles,  and  the  search  strategy  determine 
what  specialists'  combinations  have  the  potential  of  generating  candidate  trajectories 
that  best  meet  all  trajectory  goals.  To  generate  different  candidate  trajectories,  the 
i DM  can  adjust  the  specialists'  inputs,  which  are  the  weightings  on  their  performance 
criteria,  trajectory  constraints,  and  size  of  the  trajectory  search  space. 

Generate  Candidate  Trajectories  Using  the  Specialists.  The  TDM  activates  the  special¬ 
ists  or  sequence  of  specialists  to  compute  the  candidate  trajectories.  Each  specialist 
computes  the  trajectory  that  is  optimum  relative  to  its  domain  of  expertise. 

CritiqueCand idate  Trajectories  Using  the  Specialists.  The  TDM  has  each  specialist 
evaluate  the  performance  of  all  candidate  t ra jector ies  relative  to  their  domain  f  ex¬ 
pertise.  The  array  of  critiques  provided  by  the  specialists  are  used  by  the  TDM  in  the 
next  step  to  evaluate  the  performance  of  each  candidate  relative  to  all  trajectory 
goa i s . 

Evaluate  and  Compare  Candidates.  The  performance  of  the  candidate  trajectories  against 
the  trajectory  goals  is  evaluated  and,  when  necessary,  the  performance  ■  -t  different 
candidates  are  compared.  These  evaluations  and  comparisons  can  have  tour  types  <  f 
trajectory  search  actions:  1)  modifications  to  existing  candidate  t.  ra  jeer .  >r  ies  tr 
improve  their  overall  performance  by  changing  constraints  to  the  specialists'  :  >p i  m : /a- 
tion  problems,  2)  generation  of  entirely  new  candidates  by  using  specialists  r  r-<  rui¬ 
nations  of  specialists  that  were  not.  previously  used,  .3)  refinement  of  coarse,  1  . ir¬ 
resolution  candidates  that;  are  considered  desirable  by  a  return  to  the  specialists  !->r  a 
detailed  trajectory  calculation,  and  4)  acceptance  of  one  or  more  candidates  as  desir¬ 
able  trajectories.  If  any  one  of  the  first  three  actions  occurs  alter-  an  evaluat  :  n, 
the  specialists  are  activated  to  compute  the  candidates  and  the  evaluat i on /compare  step 
is  performed  again.  The  iteration  through  the  eval uat ion /compare  step  continues  tin*  i ! 
one  or  more  trajectories  are  found  desirable.  When  candidates  cannot  le  found  rh.it 
satisfy  all  trajectory  goals,  priorities  on  the  goals  and/or  goal  thresholds  are  :r  'd  : - 
tied  until  a  successful  candidate  (or  candidates)  is  developed. 

THE  FRAME  SYSTEM 

As  illustrated  in  Figure  2,  t ne  IJTCS  concept  uses  a  system  of  frames  as  the  com¬ 
munication  medium  between  the  TDM  and  the  trajectory  specialists.  A  frame  is  defined  as 
a  data  structure  describing  a  class  of  objects  and  consists  of  a  collection  of  slots 
that,  describe  the  various  aspects  of  the  object.  The  value  of  a  slot  can  be  another 
frame,  a  frame  feature  which  gives  rise  to  a  hierarchy  of  frames  (4J. 

Frames  are  used  for  a  number  of  purposes  in  UTC’S  as  shown  in  the  frame  hierarchy  of 
Figure  4.  The  four  sets  of  frames  shown  in  the  figure  represent  the  following: 

Current  Situation  represents  the  aircraft  state  and  the  mission  situation,  such  as 
threat  status  and  mission  critical  points. 

Search  Space  represents  items  such  as  the  volume  of  the  trajectory  search  space  and  the 
search  strategy. 

Trajectory  is  a  hierarchy  at  frames'  representing  the  trajectories.  At  the  top  of  this 
hierarchy  are  the  composites,  the  TDM  cand  idate  trajectories.  Composites  are  a  combina¬ 
tion  of  hypotheses  which  are  the  trajectories  generated  by  the  individual  specialists. 
The  hypotheses  are  divided  into  segments  by  the  specialists  as  a  means  for  representing 
the  different  aspects  of  the  trajectories.  Other  frames  associated  with  trajectories 
represent  critiques,  refinements,  trajectory  alternatives,  and  comparisons  between  com¬ 
posites  . 

Spec ial ist  contains  the  procedures  for  inputting  data  and  receiving  data  from  the  dif¬ 
ferent  specialists. 

The  frame  mechanism  has  two  features  -  generic  frames  and  attached  procedures  - 
that  have  been  useful  in  UTCS.  Generic  frames  have  been  employed  extensively  for  storing 
the  specialists'  trajectories  where  frames  for  composites,  hypotheses,  and  segments  are 
instantiated  whenever  a  specialist  is  activated.  Attached  procedures,  often  called 
demons,  have  been  an  efficient  way  for  the  TDM  inference  engine  to  invoke  a  specialist. 
Whenever  a  rule  firing  calls  for  a  particular  specialist  to  be  processed,  a  value  of  a 
particular  slot  in  the  specialist's  frame  is  set.  This  initiates  a  procedure  that 
activates  the  specialist.  The  inference  engine  is  not  involved  in  setting  up  the 
specialist's  inputs  or  receiving  the  specialist's  inDUts. 
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TRAJECTORY  DECISION  MAKER  FRAME  SYSTEM 
FIGURE  4 

In  summary,  the  combination  of  a  frame  system  and  a  production  rule  system  is  we.il 
suited  to  the  UTCS.  The  use  of  generic  frames  and  a  hierarchy  frame  structure  is 
efficient  for  representing  tra jert or ips.  Activating  the  specialists  as  attached  pro¬ 
cedures  in  the  frame  slots  eliminates  the  need  for  those  detailed  procedures  being  mech¬ 
anized  in  the  production  rule  system.  storing  the  trajectory  data  in  frames  instead  of 
as  facts  in  the  fact  list  drastically  i educes  the  size  of  the  fact  list  and,  cor¬ 
respondingly,  the  execution  time  of  the  production  rule  system. 

TRAJECTORY  SPECIALIST  PROCESSING 

In  the  UTCS  concept,  each  specialist  has  its  own  algorithm  ana,  perhaps.  Product  ion 
Rule  System  for  computing  a  trajectory  that  is  optimum  or  desirable  for  its  domain. 
However,  in  interfacing  with  the  f rame  system,  all  the  specialists  will  have  a  number  of 
common  elements.  Figure  5  illustrates  a  general  structure  for  each  specialist's  proces¬ 
sing.  The  frame  system  provides  a  symbolic  representation  of  specialists'  inputs  which 
are  converted  into  a  numerical  representation  of  the  inputs  using  a  decoder  function. 
The  set  of  inputs  is  then  transformed  into  an  appropriate  form  for  the  specialist 
trajectory  processing. 

Each  specialist  will  have  two  modes:  trajectory  generation  and  trajectory  cri¬ 
tique.  The  critique  mode  provides  data  to  the  TDM  which  it  uses  to  evaluate  the  other 
specialists*  trajectories  in  terms  of  this  specialist's  domain  and  objectives.  For 
trajectory  generation,  the  specialist  computes  the  traiectory  optimum  relative  to  its 
domain,  using  models,  data  bases,  knowledge  bases,  and  optimization  techniques  ap¬ 
propriate  to  the  processing  task.  After  being  generated,  th  trajectory’s  performance 
is  critiqued  relative  to  the  specialist's  objectives  and  criteria.  This  is  the  same 
critique  process  that  is  performed  when  the  TDM  requests  the  critique  of  an  input 
trajectcry.  After  the  critiquing  is  complete,  a  trajectory  encoder  is  used  to  transform 
the  trajectory  and  its  critiques  into  the  symbolic  representation  which  is  output  to  the 
frame  system. 

The  TDM  provides  the  same  types  of  inputs  to  each  specialist.  These  inputs  include 
the  following:  1)  a  3-D  trajectory  search  space,  including  a  starting  aircraft  state 
and  optionally  a  terminal  state,  2)  a  priority  ranking  of  the  optimization  criteria 
used  by  the  specialist,  3)  a  generate /cr  i  t  ique  request,  <i )  a  representation  resolution 
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request  (coarse,  intermediate,  or  fine), 
and,  optionally,  5)  a  reference  trajec¬ 
tory  with  tolerance  band.  If  this  lat¬ 
ter  option  is  selected  by  the  TDM,  the 
specialist  constrains  its  trajectory 
optimization  search  to  within  the 
tolerance  band  around  the  reference. 

The  general  structure  for  the 
specialists  shown  in  Figure  5  has  been 
designed  to  accommodate  existing  trajec¬ 
tory  generation  algorithms,  such  as 
terrain  following/terrain  avoidance  (5), 
maneuvering  weapon  delivery  (6),  and 
Tactical  Flight  Management  global  tra¬ 
jectory  generation  (2).  These  algo¬ 
rithms  will  be  used  in  the  trajectory 
generation  block  of  the  general 
structure.  Existing  trajectory  genera¬ 
tion  algorithms  will  typically  be  com¬ 
puting  trajectories  with  only  one  reso¬ 
lution;  therefore,  for  the  UTCS  applica¬ 
tion,  these  algortihms  will  need  to  be 
expanded  to  compute  trajectories  with 
coarse,  intermediate,  and  fine  resolu¬ 
tions. 

DECISION  MAKING  IN  PRESENCE  OF  UN¬ 
CERTAINTY 

As  indicated  earlier  in  this  paper, 
the  TDM  needs  to  account  for  the  dif¬ 
ferent  levels  of  uncertainty  and  inac¬ 
curacy  inherent  in  the  data  and  rules 
that  the  UTCS  uses  to  make  trajectory 
decisions.  Uncertainties  and  inaccura¬ 
cies  exist  in  various  forms  in  this 
system. 

Inaccuracies  are  expected  in  data 
provided  by  sensors.  For  the  UTCS,  this 
includes  data  describing  ground  threats, 
air  threats,  obstacles,  and  aircraft  and 
control  dynamics.  These  inaccuracies 
are  of  different  types.*  detection  inac¬ 
curacies,  classification  imperfections, 
and  parameter  errors. 

The  UTCS  also  exchanges  information 
with  other  on-board  systems,  not  in¬ 
volving  sensing,  and  there  will  be  un¬ 
certainties  in  some  of  the  information 
provided  by  these  systems.  For  example, 
key  mission  events  (coordinat ion  points, 
time  constraints,  and  targets)  will  have 
varying  degrees  of  importance.  This 
variation  in  importance  is  a  form  of 
uncertainty.  Another  example  is  pilot 
trajectory  preferences  that  are  input 
into  the  system  via  the  cockpit  con¬ 
trollers.  There  will  be  variations  in 
the  strength  of  pilot  preferences,  an¬ 
other  form  of  uncertainty. 


GENERAL  FLOW  DIAGRAM  FOR  EACH  SEGMENT 
FIGURE  5 


In  addition  to  uncertainties  in  sensor  data  and  information,  there  will  be  uncer¬ 
tainties  in  the  knowledge  base.  The  set  of  rules  making  up  the  knowledge  base  will  have 
varying  levels  of  credibility.  In  the  MYCIN  certainty  factor  method,  a  confidence 
factor  is  assigned  to  each  rule  by  the  human  expert  creating  the  rule  to  quantify  its 
credibility.  ^ 

A  method  for  accounting  for  these  types  of  uncertainties  is  required  in  the  UTCS 
concept.  The  method  most  applicable  to  UTCS  needs  to  be  extracted  from  the  research 
that  has  been  and  is  being  conducted  in  the  area  of  inexact  reasoning  (7],  (8],  [91. 
During  the  UTCS  project,  a  MYCIN-type  certainty  factor  method  was  used  in  simulating  the 
TDM  inference  engine,  as  described  above.  Working  with  this  method,  a  concept  for 
handling  the  types  of  uncertaint iee  present  in  UTCS  was  formulated. 


In  the  UTCS  concept,  some  of  the  facts  contained  in  the  fact  list  symbolically 
describe  such  things  as  the  elements  of  the  current  external  situation,  key  parts  of  the 
mission  plan,  the  pilot's  trajectory  preferences,  and  health  of  the  aircraft  and  its 
systems.  These  are  macroscopic  descriptions  appropriate  to  the  decision  making  aspects 
of  the  TDM.  In  the  certainty  factors  method,  a  certainty  factor  is  associated  with  each 


fact  in  the  fact  list.  Therefore,  certainty  factors  can  be  used  t«-  cinia  'erize  the 
reliability  of  the  information  contained  in  the  facts,  i.e.,  reita.r»ty  fact  is  •  tiai.-j.  - 
terizc  the  reliability  of  the  current  situation  information,  the  criticality  of  ♦he 
mission  points,  the  definiteness  of  the  pilot's  preferences,  and  the  reliability  of  the 
on-board  system  health  assessments.  With  these  factors  describing  the  certainties  of 
the  current  and  future  situations,  the  inference  engine  propagates  the  factors  through 
the  rules  and,  combines  these  factors  with  the  rule  confidence  value,  and  makes  deci¬ 
sions  from  the  resulting  rules1  certainty  values.  These  decisions  are  such  things  as 
which  trajectory  specialists  to  invoke,  what  sensor  information  each  specialist  uses  in 
generating  its  trajectory  outputs,  and  how  to  weigh  each  specialist's  outputs  in  terns 
of  its  reliability  when  making  trade-offs  between  trajectory  goals. 

In  developing  the  concept  for  handling  uncertainty,  the  interplay  between  the  TDM 
and  the  trajectory  specialists  was  addressed.  One  approach  to  establishing  the  :<  les  c..f 
the  TDM  and  the  specialists  is  to  have  each  specialist  account  for  the  uncertainties  .1: 
the  sensor  data  and  information  it  uses  when  computing  its  t.  ra  iect  or :  es.  With  this 
approach,  the  specialists  would  provide  their  trajectories  to  the  TDM  along  with  indica¬ 
tions  of  trajectory  certainty.  The  disadvantage  with  this  approach  is  the  TDM  would  be 
unable  to  vary  the  level  of  assumed  sensor  performance  or  to  select  what  sensor  data  ?-• 
use  when  creating  trajectory  candidates  with  the  specialists.  For  example,  the  i DM  ray 
want  the  terrain  specialist  to  generate  trajectories  assuming,  first,  normal  performance 
from  the  terrain  sensors  and,  then,  worst  case  performance  from  the  sensors.  Similarly, 
the  TDM  nay  want  the  threat  specialist  to  generate  trajectories  for  only  threats  known 
with  high  probability  and  also  to  generate  other  trajectories  with  the  threat  data  base 
including  known  as  well  as  suspected  threats.  For  this  reason,  the  recommended  approach 
for  dividing  the  responsibility  between  the  TDM  and  specialists  is  to  first  establish 
what  sensor  data  and  sensor  performance  levels  the  TDM  will  need  to  ;ontrol  to  create 
trajectory  candidates  especially  when  considering  trade-offs  between  trajectory  «•  a.s. 
Second,  expand  the  interface  between  the  TDM  and  specialists  s-  the  TDM  can  specify  t- 
each  specialist,  when  it  is  activated,  the  sensor  data  to  use  and  the  level  of  sensor- 
performance  to  assume  when  computing  its  trajectory. 

UTCS  SIMULATION 

A  simulation  of  the  UTCS  concept  was  performed  during  the  t’TCS  Program  <->n  a  VAX 
8600  computer.  A  short  flight  segment  of  a  low  altitude  mission  was  performed.  The 
major  parts  of  the  concept  were  simulated  -  the  TDM,  fi\e  f  the  trajectory  specialists 
(threat,  terrain,  mission,  recovery,  air-to-air  combat),  and  the  RPC.  The  simulation 
included  models  of  a  high  fidelity  fighter  aircraft  and  associated  inner- loop  fliqht 
control  system.  The  simulation  used  DMA  (Defense  Mapping  Agency)  terrain  elevation  data 
from  the  Fulda  Gap  area  and  including  a  number  of  ground  threats.  t-eneri'*  lethality 
models  were  used  for  the  ground  threats.  Detection  of  an  unexpected  ground  threat  and 
an  air  threat  were  the  events  simulated. 

Two  Higher  Order  Languages  (HOLs)  were  used  for  the  simulation  software  ueveD  p- 
ment :  VAX  LISP  (the  Digital  Equipment  Corporation  Common  LISP  language)  and  FORTRAN. 
The  trajectory  specialists,  the  aircraft  and  control  models,  and  the  [’PC  were  piogranr.ed 
in  FORTRAN  because  they  have  involved  primarily  numerical  caiculat  n  -ns.  The  p: oriurt  .ion 
rule  system  and  frame  system  were  programmed  in  VAX  LISP  for  ease  of  developing  t  he 
symbolic  processing  part  of  the  concept. 

Because  the  UTCS  Program  was  an  exploratory  development  program,  only  a  prototype 
set  of  rules  for  the  TDM  was  developed  and  implemented.  A  total  of  140  rules  wete 
implemented  to  illustrate  all  operations  of  the  TDM  in  the  UTCS  concept.  A  signifi¬ 
cantly  larger  knowledge  base  will  be  needed  in  a  fully  operational  system.  Also, 
because  of  the  exploratory  nature  of  the  project,  the  trajectory  specialists  were  not 
developed.  Instead,  their  behavior  was  emulated  using  a  dynamic  programming  algorithm 
and  software  code  previously  developed  on  the  Air  Force  Tactical  Flight  Management 
Program  [  1  ] . 

CONCLUSION 

The  UTCS  concept  has  been  defined  and  a  top-level  simulation  of  its  characteristics 
has  been  performed.  The  concept  is  a  trajectory  and  attitude  control  system  for  pilot 
decision  aiding  designed  for  operation  in  an  environment  of  unplanned  events,  changing 
missions,  and  damaged  aircraft  expected  in  the  intense  threat  environment  of  thel^O’s. 
A  functional  architecture  of  independent  trajectory  specialists  integrated  with  a  know¬ 
ledge-based  trajectory  decision  maker  is  the  cornerstone  of  the  concept.  The  issues 
involved  in  the  integration  of  the  numerical  processing  and  symbolic  processing  that  is 
inherent  in  this  architecture  and  any  knowledge-based  trajectory  control  system  have 
been  addressed. 

This  concept  was  developed  as  part  of  an  exploratory  development  program.  Further 
development  of  the  concept  will  need  to  include  the  following  developments:  the  TDM 
knowledge  base,  the  threat  and  mission  trajectory  specialists,  techniques  for  handling 
uncertainty,  the  aircraft  model  learning  module,  a  cockpit  integration  concept,  and  a 
computer  architecture  for  parallel  implementation  of  the  specialists  and  TDM. 
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SUMMARY 

Trends  in  air-warfare  make  the  development  of  autonomous  unmanned  aircraft 
necessary.  Advances  in  Intelligent  Knowledge  Based  Systems  (IKBS)  and  in  computing 
technology  will  make  it  possible.  This  paper  examines  the  case  for  unmanned  aircraft 
and  their  probable  evolution  from  manned  platforms  with  discrete  intelligent  aids  through 
more  sophisticated,  highly  interactive  IKBS  to  eventual  autonomy.  Some  indications  are 
offered  of  the-  developments  that  will  be  called  for  in  the  IKBS  themselves  and  in 
computing  hardware  and  some  of  the  problem  areas  that  are  already  known,  such  as  valida¬ 
tion  and  knowledge  elicitation  are  considered  in  some  detail. 


1  WHY  CONSIDER  AN  UNMANNED  COCKPIT? 

There  are  two  main  driving  forces  that  lead  us  to  consider  future  air  systems  plat¬ 
forms  which  do  not  carry  a  human  pilot  but  which  perform  many  of  the  functions  of  today's 
piloted  aircraft  (helicopters  as  well  as  fixed  winq) .  Firstly,  there  is  the  continuin': 
escalation  in  the  complexity  and  workload  involved  in  the  modern  military  aircraft 
mission,  and,  secondly,  there  is  the  awareness  of  the  enormous  strides  that  are  Lcir.’i 
made  in  computer  power  and  data  storage,  and  which  will  undoubtedly  continue.  Admittedly 
there  are  still  many  who  remain  sceptical  about  the  potential  of  sophisticated  pi  kt  h-s:- 
aircraft.  For  them  it  should  be  instructive  to  look  back  to  the  recent  past.,  .is  indeed 
it  is  for  all  who  would  bo  rash  enough  to  attempt  to  predict  the  future,  and  consider  how 
far  we  have  cone  in  the  last  20  years  or  so.  Retrospective  contemplation,  incidentally, 
reinforces  the  wisdom  of  Will  Durant's  dictum,  "Those  who  do  not  know  history  are  forever 
condemned  to  repeat  it". 

Little  more  than  20  years  ago  enemy  territory  would  have  be«:  r.  attacked  by  bombers 
at  high  altitude,  carrying  a  crew  of  2  or  frequently  more,  with  attrition  rat  *-s  that  won 
regarded  as  acceptable.  As  far  as  computing  was  concerned,  the  first,  primitive,  rocket 
calculators  were  just  appearing  on  the  market  and,  cy  today's  standards,  they  were 
horrendously  expensive.  In  seeking  to  predict  the  progress  *f  the  next  two  decades  it 
will  be  as  well  not  to  be  too  cense r va t i ve . 

Nowadays,  as  is  widely  appreciated,  the  military  flying  mission  has  become  very  muc 
more  demanding.  Penetration  at  very  low  level  is  normal  practice,  the  density  of  threats 
both  ground  based  and  airborne,  is  exceedingly  high  ami  the  amount  of  information  concern 
inq  the  mission,  intelligence  and  threats  that  the*  p-lrt  is  expected  to  process  is 
enormous.  Continuing  pressures  to  reduce  crew  numbers  compound  the  problems  by  farther 
increasing  the  demands  on  the  remaining  crew,  often  n«»w  just  one  mar.,  and  the  shortage  .  f 
time  for  reaching  a  decision  and  implementing  it  in  low  level  flight  makes  matters  st  ill 
more  difficult.  Similar  considerations  apply  to  battlefield  helicopters  as  to  fixed  wire 
fast-jet  aircraft.  Few  would  new  dispute  that  the  task  of  the  human  pilot  in  military 
aircraft  has  become  so  demanding  that  the  provision  of  intelligent,  assistance  will  be 
essential  in  the  near  future.  If  we  are  to  learn  the  lessons  f  history  it  must  lx*  seen 
as  inevitable  for  the  trend  to  continue  and  ultimately  the  pilo*  will  be  surplanted  for 
some  of  those  missions  which  today  require  manned  aircraft. 

In  the  information  processing  field  the  achievements  in  modern  int  curated  circuits 
are  too  well  known  to  require  great  elaboration.  Such  are  the  commercial  pressures  to 
achieve  still  greater  component  densities,  storage  capacity  ar.d  processing  speeds  that 
there  can  be  no  real  doubt  that  substantial  further  gains  in  all  these  areas  will  be  made 
before  the  end  of  the  century.  In  the  immediate  future  current  VLSI  programmes  will 
yield  submicron  integrated  circuit  technologies  with  useful  u  creases  m  speed  and 
component  density.  As  long  as  silicon  continues  to  be  the  favoured  material  VLSI  devel¬ 
opments  will  also  continue  to  reduce  the  cost,  of  any  given  data  processing  capability. 
Some  discontinuity  in  this  trend  is  probably  inevitable  as  alternative,  higher  speed, 
materials  such  as  C.aAs  reach  the  market  place  but.  in  time  they  toe  will  become  cheaper. 
Whilst  it  is  right  to  be  optimistic,  it  is  also  necessary  to  appreciate  that  the  pace  of 
improvement  may  be  slowing  down  as  has  been  pointed  out  by  Kuck  et  al  [ 7  J .  Drama t  ir 
improvements  in  computing  hardware  will  only  come  through  significant  changes  in  the 
basic  technology  employed  but  for  this  we  may  look  to  the  aovent:  of  techniques*  such  as 
parallel  processing  [1J  (2]  (3)  [4],  Initially,  useful  gains  will  be  made  by  configuring 

conventional  systems  in  a  parallel  fashion  but  in  tin  longer  term  the  full  potential  of 
parallel  processing  will  be  realised  through  the  use  of  technologies  that  lend  themselves 
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naturally  to  parallelism.  Foremost  amongst  these  at  the  present  time  are  optical 
processing  and  optical  data  storage  [5]  [6]  (7)  (8).  However,  it  is  not  so  mu--:,  ir.  * 

hardware  that  the  real  advances  need  to  be  made,  although  they  should  n-  >*.  \  ,  jr.-i <  r- 

estimated,  but  in  the  associated  software  and  here  it  is  not  merely  the  sub  s*  -  »:*  t  j  .» . 
programming  problems  that  can  currently  be  foreseen  but  the  huge  c.-nog •  »  u j  1  hulbnns 
that  lie  ahead  that  will  prove  the  most  awesome.  Fortunately,  we  an-  armed  with  •  :.*  n*  * , 

scarcely  tapped  resource  of  Intelligent  Knowledge  Based  Systems  l  1Kb.:*)  which  i  he 

to  be  a  formidable  weapon  in  providing  a  worthy  replacement  for  the  r.an  ir.  *  :.*  '  :•  . 

Once  again,  although  the  challenge  is  daunting  it  would  be  fatal  to  ,:*.vr-.T  phasi:,** 
difficulties,  we  should  take  heart  from  the  achievements  of  th«*  past  *  w-  s . 

At  this  point  it  is  worth  pausing  to  consider  why  the  prestr.ee  f  i  car.  s  n  *  h« 

cockpit  is  still  readily  accepted  with  little  question.  After  all  it  an  avi  r.;:  .  r.::r.-  .  r 

were  to  propose  a  sensor  system  of  poor  optical  quality,  connected  by  links  !  v  -ry  1  •* 

bandwidth  to  a  processor  with  erratic  performance  that  was  never  specified  a*  all,  .•  ? 
alone  subjected  to  the  highly  formalised  functional  specifications  that  are  :e:a:  :■  js  t 

sine  qua  non  in  modern  systems  circles  ho  would,  I  suggest,  be  unlikely  *,  *..-  very 

seriously.  Yet  that,  with  considerable  simplification,  is  a  fair  iesc  r ;  t  t  :  <r.  *  :•  .r.i 

visual  system,  admittedly  redeemed  somewhat  by  extremely  sensitive  phot  or.  do*  ve  r  •  i  *  i  r.  : 
by  ill-understood  but  sophisticated  focal  ’plane1  processing  (for  a  mure  sophisticate: 
account  of  human  visual  processing  see,  for  example,  ref  The  basic  data  rates  f 

human  data  processing  and  human  reaction  times  are,  by  electronic  stan.iar  is ,  siw. 
why  is  the  man  regarded  as  indispens  ible?  Indeed  why  is  it  that  mar.  i  ,  by  c  rp««r: 
consent,  still  superior  to  any  inanimate  system?  The  reason  is  that,  despite  bis  sheit- 
comings,  man  remains  the  most  effective  parallel  processor  available.  *h,  ;r.a  :i 
system  can  yet  compete  with  the  human  operator  neither  car.  any  rar.-made  f  us :  -:-r,  tve:,;-,:  :  .* 
yet  approach  the  human  ability  to  correlate  information  fr-r.  *::»ly  ::sj  s  . 

In  the  field  of  signal  acquisition  and  processing  ir  is  unlikely  ir.i*  .my  .  •  i  ♦  •  •  *  r  •  n ; 

system  could  currently  match  the  extraordinary  human  seioc»i\v  cupa:  :  I  lty  r  .in  •  :  j. 

the  well  known  "cocktail  party  effect".  Combined  with  these  attriL-tec  are  t;.-  well- 
established  abilities  of  the  human  operator  to  draw  upon  l  v  ist  s*  •  *  :  <  x;.*-r  s*  a*.  : 

to  apply  this  in  the  form  of  heuristics  to  yield  *  short,  out’,  :  r.  ‘  .•  .  • 

problems.  Man  is  also  adaptable  and  versatile  to  a  >•  m*  e  t  ha:  n-  irr  .  f  i  1  :  •  »*. 

yet  match. 


Granted  these  virtues,  is  it  sensible  to  center p la* e  oxclujin-:  ar.  :  .  i  *  fr 

the  cockpit?  Even  accepting  that  ho  is  currently  subjected  to  extremely  ..  w  :  k  *  a: 
would  it  not  be  better  to  confine  our  attention  to  providing  him  w:  t :.  :i  *.  1  i  - 

gent  aids  that  might  enable  him  to  undertake*  his  task  adequately?  \  v<  r  if  •hi..  [  r  ■.  ■  : 
possible  in  the  increasingly  complex  and  hostile  envit-.nr.on*  f  fitv.iv  wai  f  ire 
still  remain  the  human  phvs  :  olog  ica  1  limitations  that  ar>  likely  *.  b*  .-  r-1  an  :  nc  r.  i  .■  :  r.  : 
drawback  and  there  is  the  further  point  that  •eliminating  th«.  human  :  il.t  ray  a  Is  :  <  r 
the  necessity  for  many  current  constraints  on  aircraft  design.  The  jT.ysi  j  act  i  . 

include  the  well  known  high  '  g '  manoeuvre  restrictions  and  t  b*  re  •*.:  t  •  •  pr.  v  i  :<  t  r  !*..-*  :  :: 
against  the  consequences  of  chemical  and  nuclear  weapons.  In  this  te.-ij.o*  a?  least  ran 
is  not  an  asset,  he  is  a  liability.  Removing  the  man  f  r  or  the  cckpir,  f  c.-.jis.  ,  .»i 
removes  the  need  for  the  cockpit  itself  and  saves  the  bulk  and  w.  ;  :ht  f  *  ;.«•  *  -e.-i  :  •  r. 
seat,  displays  and  controls  and  eliminates  the  need  for  a  la  rue  ♦  :  ar.spurer.c-y .  Ik*;.*.:  i  n 

the  avionics  significant  savings  would  accrue  from  the  el  iir.injt  i'*n  i  redact  i  ,-r.  [  t  • 

dancy  introduced  to  ensure  levels  of  safety  that  were  only  require.!  f<ur  rar.-oar  ry  i  r.r. 
aircraft.  Environmental  conditioning  would  no  Ion  i*  r  be'  repined  f  r  t  :>  »!  :  n  t  c 

for  the  avionics,  with  consequent  reduced  demands  on  engirt-  air  bleed  and,  f. rally,  a: 
front-end  space  should  become  available  for  important  sensors.  At  the  very  Li  st  t 
savings  in  volume,  weight,  power  dissipation  and  cooling  requirements  should  t:e  sat  : 
to  offset  the  additional  demands  made  by  the  new  intelligent  automated  syu«r. 

I  WHY  IS  IKBS  THE  KEY? 

Intelligent  Knowledge  Based  Systems  are  the  practical  embodiment  of  irt  lft.'iui 
intelligence,  which  after  years  of  being  regarded  as  an  academic  curiosity,  unli<v’.y  ’ 
be  of  practical  importance,  has  emerged  as  almost  a  prerequisite  for  any  syst«-r  that 
purports  to  be  up-to-date.  What  has  happened  to  bring  this  about  is  a  chant*  in  appr  ad.: 
instead  of  trying  to  create  "intelligence"  ab  initio  from  basic  components  mi  rud  i  rvii  *  a  1  y 
algorithms  the  philosophy  is  now  to  take  existing  human  knowledge  and  embed  this  i  r.  t 
specially  designed  computer  environments.  Instead  of  starting  from  scratch  we  an. 
endeavouring  to  start  from  where  wo  are  now.  This  is  the  reason  for  the  intense  w.  i  i 
wide  interest  in  so-called  Expert  Systems  and  their  more  sophist icatori  rclat ions,  JKi-H. 

At  this  point  a  word  on  nomenclature  is  appropriate;  in  the  UK  it  is  ■•lenerally 
accepted  that  Expert  Systems  represent  the  simple  end  of  the  intelligent  systems  run 

providing,  for  the  most  part  deterministic  answers,  calling  upon  embedded  human  knevi e.i.je 
and  often  requiring  a  lot  oi  >er  interaction.  IKBS  is  the  tern  reserved  for  rv>rv 
ambitious  systems  involving  complex  multi-reasoning  systems  and  often  involving  much 
closer,  direct  interaction  with  the  real  world.  This  classification  is  illustrated  m 
Figure  1 . 
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In  principle,  therefore,  IKBS  offer  the  opportunity  to  substitute  an  automated 
system  for  the  human  operator  in  the  military  aircraft  cockpit.  Clearly,  this  will 
initially  be  in  the  form  of  an  intelligent  assistant  in  a  piloted  aircraft  (10]  (11] 

[12]  (131  but  as  confidence  is  gained  and  capability  is  extended  the  assistant  will  take 
over  more  and  more  so  that  eventually  the  pilot  himself  can  be  replaced.  Whilst  the  IKBS 
techniques  are  still  in  their  infancy  they  offer  the  valuable  benefit  of  incorporating 
human  knowledge  and  experience,  in  its  most  up-to-date  form,  into  the  automated  systems. 

A  powerful  advantage  of  IKBS  is  their  ability  to  maintain  a  consistent  high  level  of 
performance  without  fear  or  fatigue  and  largely  irrespective  of  the  prevailing  conditions. 
Furthermore,  their  embedded  expertise  may,  if  appropriate,  be  culled  from  more  than  one 
expert  provided  that  the  results  can  be  suitably  melded  into  a  coherent  body  of  knowledge. 
The  problems  of  using  multiple  experts  to  generate  the  knowledge  base  are  considered 
further  later  in  the  paper.  In  domains  where  expertise  is  scarce,  possibly  confined  to  a 
small  number  of  people,  IKBS  offer  the  opportunity  to  capture  the  relevant  knowledge, 
thereby  ensuring  that  it  is  not  lost  and,  if  appropriate,  that  it  can  be  more  widely 
disseminated.  Although  this  feature  is  generally  thought  of  in  the  context  of  specialised 
terrestrial  activities,  it  is  in  principle  applicable  to  airborne  skills  (eg  in  ASW 
interpretation) .  It  might  also  be  valuable  in  training  pilots  to  use  new  equipment, 
including  of  course  IKBS  themselves. 


Granted  that  IKBS  will  make  their  way  into  the  cockpit,  initially  in  the  role  of 
intelligent  assistants  to  the  human  pilot  (10]  (11]  (12]  l  13],  it  is  appropriate  to 

consider  what  differentiates  an  intelligent  aid  from  conventional  automation.  There  are 
a  number  of  key  features,  not  all  of  which  need  necessarily  feature  in  every  system: 

(i)  Contextual  Awareness 


Conventional  automated  systems  generally  have  closely  defined  limits 
of  application.  Indeed,  formal  functional  definition  procedures  lay  great 
store  by  precise,  limiting  demarcation  of  the  domain  in  which  the  system  is 
to  operate  and  in  defining  in  detail  its  interaction  with  other  subsystems. 

By  contrast  IKBS  boundaries  may  be  fuzzy  because  the  concepts  they  involve 
are  not  strictly  defined.  Their  interactions  may  change  dramatically  with 
relatively  slight  changes  in  the  circumstances.  Very  often  an  IKBS  will  be 
far  broader  in  its  scope  than  a  deterministic  system  and  it  will  be  "aware” 
of  far  more  of  the  context  in  which  a  decision  is  to  be  made  and  its  decision 
will  reflect  that  context,  just  as  the  decision  of  a  human  operator  does. 

The  decision  not  to  attack  a  target  of  opportunity  because  it  is  of  insuf¬ 
ficient  importance  bearing  in  mind  the  state  of  the  battle,  would  be  just 
one  such  example. 

(li)  Alternative  Solutions 


A  well-established  virtue  of  IKBS  is  their  ability  to  present  alter¬ 
native  solutions  and  recommended  actions  with  confidence  factors  and,  if 
desired,  an  account  of  the  reasoning  behind  the  course  of  action  recommended. 
Alternative  solutions  may  be  presented  in  terms  of  various  postulated  develop¬ 
ments  in  scenario,  for  example  "If  SAM  site  suspected  at  A  is  confirmed  divert 
to  . "  "If  JPT  continues  to  rise  . " 


(til)  Self  Learning/Self  Extending 

An  IKBS  should  not  be  thought  of  as  immutable,  after  all  a  human  pilot 
continually  learns  by  experience.  Thus  a  sophisticated  IKBS  will  involve 
feedback  from  the  world  with  which  it  is  interacting  and  will  have  the  ability 
to  change  its  reasoning  accordingly.  In  the  broader  context  of  mission 
planning  the  IKBS  may  be  expected  to  report  on  its  experience  during  the 
mission,  including  such  information  as  a  high  level  interpretation  of  threat 
data.  Suitably  combined  with  that  from  other  aircraft  this  would  modify  the 
database  of  the  IKBS  for  subsequent  missions. 


fjv)  Adaptability 

In  many  cases  IKBS  incorporate  a  user  model  and  .here  is  no  reason  why 
this  should  take  a  single  form.  It  should  certainly  reflect  the  experience, 
ability  and  characteristics  of  the  pilot  so  that,  for  example,  it  would  not 
trouble  a  highly  experienced  pilot  with  unnecessary  detail  but  would  provide 
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this  for  one  less  experienced.  It  might  also  compensate  for  individual 
characteristics,  a  particular  pilot's  over-enthusiasm  for  active  jamming 
might  be  an  example.  Personal  characteristics,  including  preferences, 
could  easily  be  fed  into  the  IKBS  with  pre-mission  briefing  material  (ar. 
extremely  simple  precursor  to  this  is  the  driver  preference  data  on  seat 
and  mirror  positions  now  stored  in  more  expensive  cars).  Again  the  IKBS 
should  adapt  to  the  increasing  experience  of  the  pilot,  even  ir.  the  course 
of  the  mission  and  once  more  the  analogy  with  the  behaviour  of  a  human 
companion  is  relevant. 

(v)  Explanation 

One  characteristic  of  expert  systems  that  is  widely  acclaimed  is 
the  ability  to  provide  explanations  in  varying  degrees  of  detail  of  the 
reasoning  underlying  their  decisions  or  recommendations.  Whilst  this  may 
well  be  of  value  in  non-real-time  terrestrial  applications,  particularly 
those  in  which  there  is  a  high  degree  of  user  interaction  (the  many  well- 
known  medical  diagnosis  programs  are  typical  examples),  it  is  a  technique 
that  is  likely  to  be  of  only  limited  value  in  military  aircraft.  Certainly, 
there  is  rarely  time  for  the  pilot  to  recognise  that  he  has  a  need  for  an 

explanation  and  for  him  to  request  it  and  digest  it  before  action  needs  to 

be  taken.  Thus  the  system  must  be  designed  to  provide  the  right  degree  of 

explanation  and  justification,  but  no  more,  and  to  present  it  in  a  readily 

assimilable  form.  Furthermore,  it  must  adapt  its  explanation  to  the 
circumstances,  curtailing  it  when  time  is  too  short  or  when  too  much  other 
information  must  be  conveyed  simultaneously.  A  truly  adaptive  IKBS  will 
adjust  the  extent  and  depth  of  explanation  to  suit  the  experience  and 
requirements  of  the  pilot  and,  moreover,  will  continuously  readjust  them 
as  the  mission  progresses. 

It  is  evident,  that  an  IKBS  should  be  far  more  adaptable  and  compliant  than  normal 
software  systems.  As  progress  is  made  towards  fully  autonomous  unmanned  aircraft  it  is 
anticipated  that  the  IKBS  provided  as  intelligent  assistants  will  evolve  toward  a  more 
autonomous  role.  Much  of  this  evolution  may  occur  in  a  st ra ight forward  way,  without  the 
need  to  completely  re-think  the  systems  concepts.  Faith  in  the  potential  of  fully 
autonomous  systems  will  be  generated  as  confidence  in  IKBS  techniques  is  built  up  during 
the  phase  in  which  they  fulfil  the  role  of  intelligent  assistants.  It  fellows  that  seme 
care  must  be  taken  over  the  introduction  of  the  initial,  discrete  IKBS  in  an  advisory, 
aiding  capacity,  since  it  would  be  quite  easy  to  undermine  confidence,  rather  than  create 
it,  either  through  the  use  of  systems  that  purported  to  be  intelligent  but  which  turned 
out  to  be  dim-witted  or,  conversely,  by  premature  attempts  at  over-ambitious  systems 
which  failed  to  live  up  to  their  aims.  Once  again  the  lessons  of  the  past,  not  least 
those  learnt  from  the  introduction  of  computing  equipment  into  military  aircraft,  must  be 
firmly  in  mind. 

3  POTENTIAL  APPLICATIONS  OF  IKBS 

Having  agreed  that  progress  towards  the  unmanned  cockpit  will  be  evolutionary  and 
that  it  will  follow  on  from  the  development  of  discrete  intelligent  aids  of  gradually 
increasing  scope,  it  is  appropriate  to  consider  what  applications  in  the  military  cockpit 
are  most  likely  to  benefit  from  the  use  of  IKBS.  It  is  convenient  to  consider  the  poten¬ 
tial  applications  of  IKBS  in  military  aircraft  under  a  number  of  headings: 

3 .  1  Planning 

Planning  is  a  major  activity  both  prior  to  a  mission  and  whilst  it  is  in  progress. 
It  is  a  splendid  example  of  an  intelligent  reasoning  process  that  calls  upon  many  sources 
of  data,  often  otherwise  unrelated,  and  which  almost  invariably  requires  knowledge  of  the 
context.  The  time  constraints  for  pre-mission  planning  are,  of  course,  generally  son.owha 
less  severe  than  those  for  planning  in  the  course  of  the  mission,  otherwise  the  two 
aspects  are  broadly  similar. 

Mission  planning  must  take  account  of  a  wide  range  of  factors.  win  list:  the  basic 
objective  is  often  well  defined  and  of  the  "Destroy  fixed  target  at  point  X”  form,  over, 
such  a  definitive  objective  may  be  subject  to  caveats  (eg  "at  all  costs”  or  "without 
placing  the  aircraft  at  risk”  or  "assuming  that  it  has  not  been  successfully  attacked  Ivy 
other  aircraft  beforehand").  The  objective  will  often  be  subject  to  change  in  the  course 
of  the  mission  and  for  many  missions,  CAP  or  attack  of  battlefield  armour  by  either  heli¬ 
copters  or  fixed  wing  aircraft,  for  example,  it  will  not  be  precisely  defined  at  the 
outset.  In  these  cases  there  are  many  implied  constraints  on  the  mission  that  the  pilot 
has  knowledge  of,  possibly  subconsciously,  that  must  be  emulated  by  an  IKBS  if  it  is  to 
approach  similar  levels  of  performance.  (Of  course,  it  may  be  that  not  all  the  pilots 

preconceptions  are  beneficial  . )  Once  the  basic  objectives  of  the  mission  and  the 

related  constraints  are  decided  a  choice  of  route  must  be  made  and  this  aspect  of  mission 
planning  has  already  received  considerable  attention  from  the  IKBS  community  114]  l la). 
Numerous  factors  impinge  upon  the  planning  of  a  suitable  route.  Account  must  be  taken  of 
the  terrain  and  of  known  or  suspected  enemy  threats.  If  the  data  is  uncertain  the 
reasoning  process  must  assign  a  probability  to  its  validity  and  take  account  of  this  in 
optimising  the  route.  Since  it  is  only  to  be  expected  that  the  enemy  will  dispose  his 
defensive  missiles  and  armament  in  greatest  concentration  along  just  those  routes  that 
seem  most  attractive  topographically,  the  choice  of  optimum  route  is  unlikely  to  be  self- 
evident.  It  may  also  be  influenced  by  the  presence  of  other  friendly  aircraft  in  the 


ar>*.»  L’ono'rncd.  Mission  planning  must  also  take  account  of  such  factors  as  weather,  the 
availability  .  f  i  vers  lonary  airfields,  aircraft  parameters,  the  likely  role  of  enemy 
fighters,  chemical  contamination  and  any  other  aircraft  taking  part  in  the  attack. 

Missior  planning  is  known  to  be  a  time  consuming  process,  even  when  conducted 
bo foie  the  mission  starts.  For  battlefield  helicopters  it  is  frequently  necessary  to  re¬ 
plan  at  short  ru  t  ice  in  the  course  of  a  mission  in  order  to  take  account  of  changes  in 
the  stati-  jf  the  battle  or  to  cope  with  urgent  or  emergent  threats.  In  this  case  all  the 
above  factors  must  still  be  taken  into  consideration  but  the  decision  must  be  arrived  at 
with  great  rapidity.  The  choice  between  a  direct  route  through  densely  defended  terrain 
and  a  lengthier,  less  threatened  route  which  takes  longer  and  requires  more  fuel,  may  not 
be  easy  to  gauge  correctly  in  an  instant  in  the  heat  of  battle,  especially  when  the  data 
is  incomplete,  out  of  date,  uncertain  or  conflicting.  In  such  applications  IJ’BS  already 
clearly  have  an  important  role  to  play,  especially  since  the  aircraft  now  being  developed 
will  have  fewer  crew  than  their  predecessors .  It  may  also  be  foreseen  that  from  these 
relatively  straightforward  route  planning  aids,  which  take  account  of  only  a  limited  num¬ 
ber  of  the  factors  considered  above,  will  evolve  more  complete  mission  management  systems 
capable  of  assuming  much  of  the  mission  planning  responsibility.  A  major  factor  to  be 
considered  in  their  development  is  the  manner  in  which  intelligence  data,  on  enemy  threat 
locations,  for  example,  is  updated,  since  the  manual  insertion  of  large  quantities  of  data 
by  the  pilot  in  the  course  of  the  mission  is  unlikely  to  be  acceptable.  This  question  is 
not  straightforward  since  it  -nvolves  more  than  just  the  mechanics  of  data  entry  -  itself 
no  trivial  matter  -  but  extends  to  consideration  of  the  extent  to  which  the  pilot  believes 
the  information  -  in  the  most  obvious  case,  because  of  his  position  he  may  know  that  a 
particular  piece  of  data  is  out  of  date,  but  more  subtle  examples  may  also  arise.  It 
would  be  counter-productive  to  insist  on  the  pilot  vetting  each  and  every  incoming  piece 
of  information.  Many  questions  of  this  sort  will  arise  as  IKES  planning  aids  evolve  and 
will  only  be  answered  in  the  light  of  experience. 

Planning  is  a  topic  of  major  interest  to  the  IKBS  community  at  large  and  it  is 
Likely  that  military  airborne  applications  will  benefit  extensively  from  progress  in  the 
civil  field,  from  such  applications  as  the  development  of  automated  factories,  autonomous 
land  vehicles  and  others.  Few  civil  applications,  however,  are  as  demanding  as  their 
military  counterparts,  especially  as  regards  the  need  for  near  real-time  operation. 

Whilst  the  present  discussion  has  centred  on  mission  planning  in  aircraft,  since 
this  is  a  clear  element  in  the  march  towards  the  unmanned  cockpit,  it  should  not  be  for¬ 
gotten  that  other  aspects  of  air-warfare  depend  upon  planning  activity,  often  at  high 
level.  Obvious  examples  are  the  disposition  of  aircraft,  either  for  offensive  or  defen¬ 
sive  operations  and,  on  the  battlefield,  the  tactical  disposition  of  helicopters.  It  is 
to  be  hoped  that  much  commonality  will  exist  between  ideas  developed  to  solve  planning 
;  rcblems  in  these  areas  and  these  in  the  airborne  environment. 

1.2  Signal  Processing  and  Data  Fusion 

One  of  the  striking  features  of  the  development  of  military  aircraft  since  the 
Second  World  War  has  been  the  dramatic  increase  m  the  number  and  variety  of  sensor 
systems  that  have  become  -tandard  equipment,  although,  in  passing,  it  is  interesting  to 
note  that  primitive  rada:  warn  inci  receivers  were  carried  by  many  aircraft  in  the  later 
stages  of  WWI7.  Most  pjrtr  -f  the  elect romagnet ic  spectrum  can  now  be  detected  by 
military  aircraft,  with  s«-ns'>rs  covering  radio,  radar,  infrared  and  visible  frequencies, 
although  in  the  lat»ei  cast  tin*  se-nsci  i  a  usually  the  human  eye.  Added  to  the  data 
provided  by  the  aim. if  t  Vs  s*no  rr-  is  <1  mass  of  information  relayed  from  other  aircraft 
and  from  the  ground.  t.<  •  ;!  fi>-  pi  inciple  functions  of  the  human  pilot,  and  for  which 
he  is  at  present:  uniquely  capab.e,  ip  the  integration  of  all  this  data.  He  must,  for 
example,  decipher  the  indications  from  his  threat  warning  sensors,  generally  at  a  time 
when  they  are  indicating  a  large  number  of  possible  threats,  and  correlate  the  informa¬ 
tion  with  intelligence  data  received  on  the  ground  prior  to  the  flight  and,  subsequently, 
in  the  course  of  the  mission.  In  some  cases  this  may  need  to  be  further  correlated  with 
topographical  data  and  with  radar  returns  in  order  to  build  up  a  complete  picture.  On 
occasion  the  decision  to  use  an  active  radar  sen  or,  for  example,  may  depend  on  the 
initial  sensor  data  correlation. 

Underlying  this  massive  task  of  data  fusion  is  the  fundamental  and  related  issue 
of  signal  processing.  where  the  information  is  pictorial,  in  seeking  target  information 
in  the  output  of  a  FLIP,  for  example,  the  human  visual  system  still  reigns  supreme  des¬ 
pite,  as  noted  earlier,  its  optical  imperfections  and  its  inherently  low  bandwidth.  The 
human  ability  to  perform  visual  target  detection  and  recognition  better  than  a  machine 
almost  certainly  owes  much  to  the  application  of  heuristics  derived  from  experience  and 
this  is  therefore  an  obvious  and  natural  application  for  IKES.  However,  since  many  of 
the  heuristics  involved  are  probably  not  formulated  consciously  but  are  held  at  a  deeper 
level  in  the  brain,  the  problem  of  knowledge  elicitation  is  likely  to  be  unusually 
formidable.  Thus,  in  signal  processing,  there  is  currently  a  fairly  clear  division 
between  information  conveyed  by  the  normal  human  sensory  modalities,  primarily  vision 
and  hearing,  in  which  the  human  signal  processing  is  clearly  superior  and  which  IKBS 
must  strive,  with  difficulty,  to  emulate,  and  those  sensors  which  detect  electromagnetic 
signals  far  removed  from  normal  human  ranges  and  present  their  outputs  in  formats  which, 
although  visual  or  aural,  are  not  a  familiar  part  of  normal  hu.nan  experience.  There  is 
no  way  in  which  a  human  being  would  consider  de-interleaving  the  mass  of  complex  signals 
handled  by  an  F.SM  receiver,  even  if  he  possessed  the  necessary  sensors.  Thus  for  such 
data  the  electronic  system  is  already  accepted  as  indispensable  M6].  It  is  worth 


noting,  however,  that  the  interface  between  the  electronic  system  and  the  human  operator 
is  still  far  from  satisfactory.  Despite  the  inherently  good  performance  of  the  human 
visual  system  in  processing  pictorial  information  we  have  yet  to  devise  an  interface  with 
an  ESM  system,  which  although  complex  produces  far  less  information  than  a  normal  visuai 
field,  which  handles  the  latter  data  as  effectively.  Perhaps  this  problem  will  only 
disappear  with  the  advent  of  far  more  intelligent  processing. 

Whilst  signal  processing  has  been  a  large  and  active  research  area  since  long  before 
the  advent  of  IKBS,  stimulated  by  such  applications  as  automatic  image  processing  for 
robotics  among  many  others,  data  fusion  as  an  issue  has  come  to  the  fore  with  the  develop¬ 
ment  of  IKBS  -  possibly  because  it  is,  intrinsically ,  an  intelligent  activity.  Civilian 
applications  do  exist,  in  such  vital  areas  as  the  control  system  for  complex  industrial 
installations  such  as  power  stations  and  also  in  process  control,  but  once  again  the 
extreme  demands  of  military  systems,  especially  in  the  real-time  environment  of  the 
military  cockpit  are  likely  to  provide  the  greatest  challenge. 

Indeed  a  major  step  forward  in  the  development  of  IKBS  architectures,  the  develop¬ 
ment  of  the  "blackboard"  configuration  arose  through  the  HASP/SIAP  programme  in  the  USA 
which  was  applied  to  the  interpretation  of  sonar  data  117]  and  this  remains  amongst  the 
best  known  of  IKBS  signal  processing/data  fusion  applications.  (Strictly  speaking  the 
blackboard  architecture  was  not  invented  for  HASP/SIAP,  it  had  evolved  earlier  f'r  the 
HEARSAY  speech  recogni t ion/synthesis  programme,  nonetheless  the  challenge  of  the  military 
signal  processing/data  fusion  application  provided  the  simulus  for  further  development 
[181.) 

3.3  Intelligent  System  Monitoring 

Fundamentally,  system  monitoring  requires  little  intelligence.  Despite  this,  the 
crew  of  present  aircraft  are  expected  to  spend  much  of  their  time  maintaining  a  water,  on 
the  aircraft  systems  and  dealing  with  indicated  malfunctions,  again  often  in  a  well 
prescribed  routine  fashion.  In  the  event  of  there  being  too  many  prescriptions  tc 
remember,  they  may  be  provided  with  flip-cards  for  reference.  System  monitoring  requires 
intelligence  when  the  appropriate  action  to  be  taken  is  dependent  upon  the  circumstances 
or  where  the  sensor  data  is  ambiguous  or  imprecise  and  heuristic  knowledge  is  called  upon 
in  the  interpretation.  A  particular  equipment  may  be  known  to  exhibit  certain  fault 
characteristics  in  given  circumstances  or  diversionary  landing  sites  might  entail  dis¬ 
advantages  (lack  of  facilities,  proximity  to  enemy  forces,  etc).  Thus,  whilst  some 
faults  are  simple,  say  a  generator  failure,  others  may  give  rise  to  a  multitude  of  cor.j  lev: 
indications  that  are  difficult  to  decipher.  A  serious  engine  failure,  due  to  malfunction 

or  to  enemy  action,  might  well  trigger  warning  indications  relating  to  hydraulics,  fuel 

and  electrical  systems.  The  rapid  assessment  of  such  a  plethora  of  warnings  trails  for  an 
intelligent  system.  Certainly  the  use  of  reference  material,  be  it  flip-cards  or  an 

interactive  "Expert  System"  is  impractical  at  a  time  when  the  pilot  needs  to  take  urgent 

action  and  needs  to  devote  all  his  effort  to  controlling  the  aircraft.  This  illustration 
also  provides  an  example  of  the  value  of  contextual  awareness;  the  possibility  of  an 
otherwise  improbable  malfunction  due  to  damage  from  enemy  weapons  would  clearly  be 
afforded  a  much  higher  probability  when  the  aircraft  was  flying  over  enemy-held  territory. 

However,  since  failure  analysis  is  often  either  deterministic  or  involves  fairly 
straightforward  probability  reasoning,  the  system  may  often  tend  to  divide  naturally  into 
two  sections,  the  first  performing  the  analysis  in  a  fairly  well-defined  deterministic 
way  whilst  the  second  (embodying  the  intelligence)  decides  upon  the  actions  to  recommend 
to  the  pilot. 

Failure  analysis  systems  are  important  to  the  development  of  IKBS  and  therefore  to 
its  evolution  towards  the  goal  of  achieving  autonomous  unmanned  operation,  since  they 
include  many  of  the  straightforward  and,  more  important,  the  largely  self -conta mod 
systems.  Simple  failure  analysis  systems  with  a  modicum  of  intelligence  are  practicable 
now  and  through  consistent  accurate  diagnosis  and  recommendation  should  help  significantly 
to  lay  the  foundation  for  the  confidence  in  IKBS  that  will  be  crucial  to  thou*  acceptance. 

Almost  any  failure  analysis  system  will  be  called  upon  to  process  data  with,  a  wide 
range  of  priorities  and  leading  to  conclusions  and  required  actions  of  varyina  urgency. 

It  must  be  able  to  recognise  the  important  conclusions,  especially  when,  as  is  often  the 
case,  several  system  failures  are  being  dealt  with  simultaneously.  Morevor,  it  must 
present  its  conclusions  and  actions  in  order  of  priority.  The  ability  of  IKBS  to  main¬ 
tain  a  number  of  alternative  hypotheses  throughout  the  reasoning  process  is  one  feature 
that  makes  them  a  natural  choice  for  failure  analysis  appl icat ions .  This  is  also  of 
considerable  value  in  recognising  that  two  or  more  failures  being  treated  as  independent 
may,  in  fact,  have  a  common  origin.  IKBS  continuously  accepting  updated  information  from 
the  sensors  in  near  real-time  should  show  considerable  advantages  over  basic  "snap  shot" 
ind icators . 

In  the  longer  term  more  sophisticated  IKBS  failure  analysis  systems  will  not  only 
assess  the  priorities  of  the  failures  with  which  they  are  dealing  but  will  have  sufficient 
awareness  of  the  situation  of  the  aircraft  and  its  mission,  possibly  because  they  form 
part  of  a  much  more  extensive  mission  management  system,  to  calibrate  the  importance  of 
the  failure  information  in  terms  of  other  mission  priorities.  Some  failure  indications 
that  would  otherwise  be  presented  might  be  withheld  during  critical  parts  of  the  attack 
phase,  for  example.  Of  course,  eventually  the  IKBS  will  be  able  to  decide  whether  it 
should  initiate  action  itself  or  inform  the  pilot. 


System  monitoring  does  not  simply  mean  failure  analysis  and  there  air-  r.anv  rhucs 
(eg  fuel  management)  that  automatic  systems  will  take  over  from  the  piKt.  Indeed  this 
is  already  happening.  In  the  field  of  flight  control  IK US  have  the  ;.tent  lal  t  ■  •  extend 
current  manoeuvre  demand  techniques  to  include  considerat  inn  of  the  context  in  which  t he 
manoeuvre  is  to  take  place.  The  rapid  consumption  of  fatigue  lift  becomes  of  little 
consequence  if  the  alternative  is  to  lose*  the  aircraft  either  as  the  result  of  attack  or 
system  failure  and  a  human  pilot  would  not  hesitate  in  such  decision.  An  IKK'  should  do 
likewise.  It  should  also  he  good  at  choosing  the  optimum  way  of  ach  lev ;  r.u  a  giver, 
manoeuvre,  again  through  awateness  of  the  context. 

3.4  Intelligent  Aids 

There  are  a  number  of  simple  discrete  aids,  incorporating  a  modest  degree  of 
intelligence,  that  are  likely  to  be  among  the  earliest  examples  of  IKBS  ?  c.  appear  in  the 
cockpit  and  which  can  conveniently  be  conside-ed  as  a  group.  The  application  to  automate 
display  formatting  and  display  surface  allocat  on  is  *ne  such  example.  This  may  ran je 
from  fairly  st ra ight forward ,  stereotyped  display  configuration  to  more  ambitious  arrange- 
ments  which  take  account  of  the  likelihood  of  the  information  being  noedc*d  it  any  qi\.n 
point  in  the  mission  and  of  the  extent  and  format  in  which  it  should  be  provided.  Thus 
the  scaling  of  a  map  display  may  bo  simply  tailored  to  suit  the  an*  i c i pa ted  requirement: 
of  the  aircrew,  it  being  unlikely  that  a  pilot  flying  at  high  altitude  would  i  •-  able  ‘ 
ake  use  of  very  detailed  topographical  informal  ion,  for  example.  Essentially,  this 
amounts  to  automatic,  intelligent  decluttenng;  clearly  it  must  be  intelligent  since 
pilots  will  have  little  sympathy  with  a  system  that  removes  information  lust  as  the'*  ,ro 
attempting  to  use  it.  Neither  will  there  be  much  support  for  a  system  that  is  sub  p  - 
to  frequent  changes  in  pursuit  of  an  "optimum'',  and  clearly  much  care  will  be  needed  ;n 
the  design  of  such  systems.  One  feature  which  may  be  desirable  is  an  indicati'-n, 
following  a  change,  of  where  the  information  has  aune  or  how  it  may  be  retrieved. 
Initially,  automatic  display  configuration  will  be  applied  to  the  reversion  necessary  in 
the  case  of  failure  in  the  display  system  r  in  the  case  of  an  emergency  in  the  aircraft. 
Control  of  display  formats  through  direct  vocal  input  will  probably  be  one  ■  i  the  earlier 
applications  of  speech  recognition  technology  in  the  cockpit. 

Under  the  general  heading  of  resource  allocation  a  number  of  promising  apt  1  lcat  i-.,nu 
for  I  KBS  may  emerge,  including  intelligent  aids  in  several  diverse  fields.  Communication 
management  is  becoming  more  onerous  with  ever  increasing  emphasis  up-- n  covert  operation 
and  a  system  that  makes  the  best  use  of  communication  channels  in  terms  f  propagator, 
constraints,  intelligibility,  etc  could  clearly  embody  a  certain  amount  f  1  nt  e  1  1  1 
and  relieve  the  pilot  of  an  appreciable  element  of  his  workload. 

Resource  allocation  in  the  anti-submarine  warfare  (AoW)  field  includes  such  v  n- 
siderations  as  the  decision  to  deploy  sonobuoys  in  given  con f iaurat ions  and  types  in 
terms  of  the  prevailing  conditions,  including  the  needs  of  the  mission  and,  in  the  ease 
:>f  an  ASW  helicopter  such  parameters  as  its  fuel  remaining.  The  extent  of  the  tr.t<  J- 
1  igence  embodied  in  such  systems  depends  largely  upon  the  degree  of  awareness  of  the 
situation  built,  into  the  IKBS. 

Considerations  of  resource  allocation  also  enter  into  the  ECM  and  LKM  fields  when 
the  decision  to  use  jammers  or  chaff  arise  and,  in  the  broader  context.,  in  the  allocation 
of  ES M  resources.  Again,  contextual  awarenoss  is  important  and  role  of  IKBS  uill  depend 
upon  the  extent  tu  which  this  is  incorporated  or  to  which  the  specialised  aids  art*  able 
to  interact  with  more  extensive  systems  with  greater  awareness. 

There  are  clearly  a  very  large  number  of  potential  applications  for  1Kb:*.  m  t  be 
cockpits  of  fixed  wing  fast-jet  aircraft  and  in  helicopters  in  all  their  diverse  r 
Most  of  these  will  be  undertaken  individually  as  IKBS  becomes  an  ever  more  practical 
reality  and  they  will  provide  invaluable  experience  upon  which  the  lunger  t**rx  proa ramre 
to  develop  fully  autonomous  unmanned  aircraft  can  capitalise.  Further  experience  will 
come  from  the*  numerous  [KBS  being  developed  worldwide  for  commercial  and  civil  us.  and 
from  other  military  appl icat ions ,  most  directly  from  other  autonomous  vehicle  pruurammex 
(the  DARPA  autonomous  unmanned  land  vehicle  programme  beina  a  notable  example). 

4  THE  PRACTICAL  APPLICATION  OF  IKBS 

4.1  Present  State  of  IKBS 

This  is  not  the  place  to  embark  upon  a  review  of  achievements  in  IKK-,  nr  ix  ;? 
necessary  since  there  are  a  number  of  accounts  that  are  qenonlly  available  f  1 I  . 

Already  there  are  substantial  achievements  in  the  field  but,  as  perhaps  is  *  be 
expected,  they  are  mostly  at  the  "Expert  Systems"  end  cf  the  pectrum.  It  is  probal iy 
still  true  to  say  that  there  has  yet  to  be  seen  a  system  that  e'-en  a  maiority  of 
observers  would  agree  to  call  "intelligent".  Most  do  not  purport  to  be  so,  their  pro¬ 
ponents  would  merely  claim  that  they  arc  useful,  often  as  good  as  their  human  counter¬ 
parts,  occasionally  better,  and  that  they  achieve  that  perfoimar.ee  by  the  l  ne  _r  pora  t  1  on 
of  human  expertise.  It  is  not  unusual  for  an  expert  system  to  yield  a  deter  mi n i st to 
answer  but,  having  employed  heuristic  techniques,  to  produce  it  far  quicker  than  a 
conventional  program.  Perhaps  it  is  worth  remarking,  however,  on  the  paradox  that 
becomes  apparent  when  an  intelligent  system  is  described.  invariably,  considerable 
effort  is  devoted  to  producing  an  account  that  makes  clear  every  essential  detail  of  t he 
system  and  once  it  is  s*_.  described  it  seems,  nut.  unnaturally,  virtually  self  evident  and 
therefore,  not  intelligent.  There  is  some  truth  in  the  suggestion  that  something  which 


can  be  desci  ibed  completely  cannot  be  int  o 1  1  igent  .  For  most  1KBS  worthy  of  the-  name,  of 
course,  complete  description  is  in  reality  not  practicable,  when  details  of  the 
reasoning  processes  are  borne  in  mind,  however,  descriptions  given  in  terms  of  their 
inputs  and  outputs  with  a  basic  outline  of  the  reasoning  process  i " i t  involves  a  rule 
base  of  some  uOO  rules")  sound  as  if  they  arc  complete  and  perhaps  this  is  where  the 
difficulty  often  lies. 

Whilst  this  may  seem  a  digression  it  must  be  remembered  that  the  goal  cf  intro¬ 
ducing  intelligent  aids  into  the  cockpit  will  only  be  achieved  with  the  willing  co¬ 
operation  of  the  pilots  who  will  use  them,  and  it  may  be  assumed  that  they  will  already 
have  encountered  demonstrations  of  " intel 1 iaencc"  that  left  them,  unconvinced. 

Although  there  are  a  number  of  operational  expert  systems  in  the  commercial  worl,:, 
they  make  poor  examples  of  intelligence.  Worse  still,  most  of  them,  are  interactive-  and 
require  extensive  user  input.  This  is  completely  unacceptable  for  airborne  applications 
in  all  but  the  very  simplest  cases.  More  sophisticated  systems,  true  IKbS,  do  exist  but 
they  are  almost  all  at  the  research  stage.  It  is  interesting  to  note-  that  many  of  the 
more  advanced  IKBS  are  aimed  at  military  applications.  There  have  as  yet  been  no  report 
of  IKBS  operating  in  an  airborne  environment. 

Most  simple  systems  employ  relatively  conventional  backward  cha ;  r.  lm:  !■■■•;.  xc  an.: 
it  is  almost  a  hallmark  of  a  true  IKBS  that  its  reasoning  system,  is  far  more  flexible. 

At  the  very  least  it  will  incorporate  both  forward  and  backward  chaining  but  the  most 
probable  arrangement  is  the  so-called  "Blackboard"  (18)  referred  to  in  section  2 .  i  .  In 
its  simplest  form  this  consists  of  a  central  element  (the  blackboard)  with  connections 
to  surrounding  surrogate  entities,  knowledge  sources  relating  to  particular  aspects  of 
the  problem,  ’demons'  for  tackling  certain  functions,  knowledge  bases,  etc.  Basically 
the  idea  is  that  the  current  state  of  the  problem  is  maintained  on  the  blackboard  ar.u 
the  peripherals  feed  their  outputs  to  this  when  called  upon  or  when  they  have  ■■•■me  use¬ 
ful  contribution  to  make  to  the  solution  of  the  problem.  iVnv.nu  jy,  they  can  indicate 
n«.  ods  that  they  may  have  for  part  icular  pieces  -'f  data  before  further  progress  car.  be 
made.  Various  blackboard  configurations  have  been  proposed,  including  multiple  black¬ 
board  systems,  but  they  share  t  l,e  common  virtues  of  great  flexibility,  incremental  :r  LI*., 
solution  in  an  oppert un i st ic  (:e  not  previously  defined)  fashion,  and  the  natural 
incorporation  of  data  flows  from  the  real  world.  In  principle,  they  should  be  fair.y 
readily  extensible.  As  with  most  IKBS  they  tend  to  be  extinvagont  »r.  their  ieranuj.  :  : 
computer  processing  cajacity  and  for  data  steiaoe. 

-1 . ..  IX  velcq  inq  Practical  IKBS  for  Military  Aircraft 

From  the  earlier  discussion  in  this  paper  it  will  It.  apparent  r  bi  t  two  Natures 
distinguish  military  IKBS  from  ordinary  c-.mrorc  ia  l  appl  scat  ions  uf  U.«-  t  *  chn«..- 1  o  ly  .  Vrn-.- 
two  factors  arc,  firstly,  the  neon  for  near  real-*  me  operation  and,  secondly,  cr.-ns;  ior- 
abl  complexity.  Each  of  these  represent  a  considerable  cha  l  icr.uc  *  o  the  researcher  f  • 
ins  solution  must  not  only  satisfy  the  functional  need  it  must  also  be  sufficiently 
practical  for  use  in  military  aircraft.  Thus,  the  i  up]  orient  at.  ion  must  be  or.  hardware  th 
is  rugged ,  compact,  reliable  and  affordable  besides  r.avme  sufficient  spec:,  power  and 
storage  to  moot  the  need.  Neither  should  it  require  excessive  amounts  cf  electrical  ;  w 
or  place  undue:  strain  on  the  environmental  cooling  systems.  Input  an 2  output,  require¬ 
ments  must  Le  compatible  with  the  aircraft  systems  and  software  interfaces  must  be 
iesiqned  to  be  fully  compatible  with  t  lie  aircraft's  convert  lonal  data  and  computing 
systems.  To  a  considerable  extent  these  practical  factors  i nci roast  tie-  difficulty  f 
achievin'?  near  real-time  operation  in  complex  svstens. 

Even  in  conventional  systems  the  requirement  for  near  real-time  operation  re;. risen 
a  challenge;  in  IKBS  th*'  difficulties  are  multiplied.  It  is  not  merely  a  matter  of 
ensuring  that  data  inputs  and  outputs  are  sufficiently  rapid  and  well  organised  and  that 
the  processing  is  fast  enough.  In  IKBS  there  is  the  significant  additional  and  funda¬ 
mental  problem  that  continuous  reasoning  over  time  varying  situations  is  a  topic  which 
has  yet  to  receive  much  attention  in  *  he  IKBS  world.  Recalling  that  IKBS  may  Le  self- 
extending  and  highly  adaptive,  places  this  difficulty  in  perspective.  Although  there 
are  a  number  of  high-level  toolkits  that  are  powerful  aids  to  the  prr'otyping  of  IKBS, 
sue),  as  ART,  KKK,  I.ooPS,  PlbOti  and  others,  rone  of  these  was  designed  for  the  complex, 
real-time  systems  nee. led  for  military  airborne  applications.  Thus  the  Royal  Aircraft 
Kst  at;  1  i  srir.er.t  (RAF)  at  Farnborouoh  m  the  UK  has  fund*  d  Cambridge  Consultants  limited  to 
d*  v<  lop  a  t-ekkit  specifically  designed  to  meet  such  reeds,  ii  is  called  MBS K . 

4.  i  MUJF  -  A  Toolkit  for  Real-Time  l K B .> 

MUSK  is  designed  to  support  the  prototype  development  oi  military  airborne  IKBS 
ai  r  1 i cat  ions  and  it  has  two  essential  ingredients,  a  powerful  set  of  software  tools  for 
prototype  system  development  and  a  compact ,  solid  state  target  machine  capable  of  being 
flown  in  aircraft  for  system  evaluation.  The  choice  of  hardware  for  the  experimental 
system  and  for  the  prototyping  machines  was  strongly  influenced  by  the  need  to  facilitat 
its  use  by  a  large  number  of  teams  tackling  a  wide  range  of  applications.  Thus  the 
development  system  is  based  upon  the  SUM  workstation  upon  which  the  basic  prototyping  is 
undertaken  with  the  compiled  code  being  subsequently  downloaded  to  the  target  machine 
which  employs  a  fcbO'.'O  series  processor. 


Must:  is  designed  to  be  flexible  and  it  includes  a  range  of  representation  language 
that  may  be  used  in  combination  for  maximum  efficiency.  The  flexibility  extends  to  the 


reasoning  system  which  involves  separate  reasoning  modules,  communicating  by  shared 
access  to  particular  databases.  The  number  of  and  relations  between  these  modules  and 
databases  is  not  fixed.  It  is  anticipated  that  the  system  will  mostly  be  used  in  a 
generalised  blackboard  format  (section  4.1)  and  the  approach  employes  the  'object 
oriented*  concepts  that  are  well  developed.  Each  knowledge  source  is  an  ’object’  in 
the  system  parlance  las  are  a  number  of  other  quantities),  and  contains  a  local  rule 
structure  (with  its  own  private  database  to  act  as  fast  working  memory)  in  addition  to  its 
own  database,  which  is  accessible  to  outside  objects.  This  seemingly  complex  structure 
allows  for  considerable  flexibility  in  system  construction  and  operation  whilst  main¬ 
taining  high  speed.  A  more  detailed  description  has  been  given  by  Reynolds  [20]. 

In  the  MUSE  hardware  moving  parts  have  been  excluded  in  the  interest  of  rugged¬ 
ness  and  reliability.  Non-volatile  memory  is  used  to  hold  the  IKBS  code  and  it  also 
records  events  during  trials  for  subsequent  analysis.  Facilities  are  provided  for 
accepting  aircraft  and  sensor  data  and  for  suitable  outputs  to  displays  and  aircraft 
systems.  The  entire  system,  which  employs  only  standard  commercial  components,  fits  into 
a  single  box  of  modest  proportions. 

MUSE  has  already  been  applied  in  the  laboratory  to  a  simple  cockpit  warning  system 
and  it  is  hoped  to  have  it  flying  in  an  RAE  helicopter  in  late  1987. 

4.4  Future  Role  of  Parallelism 

The  scale  of  IKBS  considered  in  this  paper  with  its  ultimate  goal  of  replacing  the 
man  in  the  military  aircraft  cockpit  is  far  greater  than  any  existing  IKBS  and  it  is 
already  clear  that  its  implementation  will  make  enormous  demands  upon  computing  technology 
both  aj  regards  processing  power  and  data  storage.  As  already  remarked  this  implies  the 
need  for  parallel  processing  and  for  optical  data  storage  and  processing.  Crude  parallel 
processing  is  already  with  us,  some  data  handling  problems  being  readily  amenable  to 
straightforward  parallel  techniques  (problems  which  involve  many  repetitions  of  the  same 
calculation  and  which  benefit  from  SIMD  architectures  are  the  simplest  examples;  somewhat 
more  complex  are  MIMD  configurations,  which  require  the  problem  to  be  conveniently 
divisible  amongst  piocessors) .  IKBS  reasoning  programmes,  however,  follow  ill-defined 
paths  that  may  change  dramatically  in  form  and  extent  as  a  result  of  quite  small  varia¬ 
tions  in  the  input  parameters.  They  are  thus  not  readily  amenable  to  predetermined  sub¬ 
division  in  order  to  allocate  portions  of  the  problem  to  different  processors.  With  IKBS 
the  efficient  use  of  parallel  processors  will  necessitate  a  wholly  new  outlook  and  this 
is  bound  to  include  the  adaptive  use  of  processing  power.  Whilst  this  is  quite  straight¬ 
forward  on  a  modest  scale,  when  considered  on  a  large  scale  (say  1000  processors)  it 
represents  a  conceptual  challenge  of  mind-boggling  proportions.  It  may  well  be  that, 
initially,  parallel  processing  will  be  applied  to  blackboard-like  architectures,  perhaps 
with  one  processor  to  each  knowledge  source  or,  more  economically,  with  a  number  of 
processors  ready  to  undertake  processing  for  individual  knowledge  sources  as  their  needs 
arise. 


A  somewhat  separate  application  of  parallel  processing  is  in  the  domain  of  self 
learning,  self  adjusting  configurations  such  as  neural  networks  and  work  is  under  way  in 
this  field  (21].  Although  this  is  still  at  an  early  stage  it  is  a  powerful  concept  that 
is  bound  to  find  widespread  application  in  the  IKBS  field. 

4.5  Validation 

Those  concerned  with  aircraft  programmes  are  already  acutely  conscious  of  the 
problem  of  validation.  Quite  severe  problems  are  already  encountered  in  the  validation 
of  large  suites  of  conventional  software  and  it  is  therefore  only  to  be  expected  that 
when  it  comes  to  IKBS,  reasoning  with  uncertain  data  and  possibly  including  self  learning 
or  self  extending  capabilities,  the  problems  will  become  still  more  difficult.  Many 
lessons  have  been  learnt  in  the  development  of  conventional  programming  and  obviously 
these  should  be  applied  as  far  as  possible  to  IKBS.  It  should  for  example,  often  be 
possible  to  attempt  functional  definitions  at  the  outset  of  development,  although  this  is 
more  feasible  for  the  simpler,  more  nearly  deterministic  systems.  With  more  advanced 
IKBS,  whose  very  nature  and  the  basis  for  whose  importance  is  their  generality  and 
adaptability,  only  the  broadest  of  definitions  will  be  possible  when  the  work  is 
undertaken  [  22 ]  . 

As  far  as  possible  internal  consistency  must  be  maintained  in  the  course  of  system 
development  and  there  are  well  established  procedures  for  the  control  of  conventional 
software  development  which  can  be  adapted  to  apply  to  some  limited  extent  to  IKBS 
programs.  However,  once  again  the  very  character istics  of  IKBS  which  make  them 
attractive  for  the  solution  of  problems  requiring  intelligent  reasoning,  namely  their 
vast  choice  of  possible  solution  paths  and  their  ability  to  adap'c  their  own  reasoning  and 
modify  both  their  reasoning  processes  and  their  databases,  are  by  their  very  nature 
antipathetic  to  validation.  Thus,  whilst  it  is  obviously  sensible  to  take  all  reasonable 
steps  to  validate  an  IKBS,  it  must  be  recognised  that  comprehensive  validation  will  be 
unattainable  either  through  the  application  of  formal  procedures  or  by  the  application  of 
test  cases  since  it  is  unlikely  to  be  practicable  to  administer  a  sufficiently  wide  range 
of  appropriate  trials . 

Against  this  gloomy  background  it  is  important  to  retair.  a  sense  of  proportion.  It 
is  all  too  easy  to  call  for  standards  of  reliability,  accuracy  and  validity  from  a 
computer  system  that  are  far  higher  than  those  demanded  of  a  human  operator.  Yet  the 
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IKBS  may  be  doing  no  more  than  taking  over  part  of  the  function  of  the  human  pilot.  If, 
for  the  moment  we  regard  the  military  pilot  as  a  "system"  it  is  worth  pausing  to  consider 
the  extent  to  which  he  has  been  "validated"  at  the  completion  of  his  training.  For  such 
an  ill-defined  system  the  validation  may  be  considered  rather  limited.  Apart  from  the 
theoretical  training  it  consists  of  the  administration  of  a  relatively  small  number  of 
"test  cases”  none  of  which  apply  to  the  situation  in  which  the  peak  performance  is 
required  (ie  in  the  stress  and  confusion  of  war  rather  than  peace-time  training)  and  some 
of  which  are  conducted  not  in  flight  but  in  a  simulator.  It  could  never  be  claimed  that 
the  envelope  of  human  piloting  activity  had  been  more  than  sampled  to  a  limited  extent. 
Furthermore  the  measures  of  performance  applied  are  relatively  few  and  to  a  large  extent 
subjective.  To  cap  it  all  it  may  be  remarked  that  the  assessment  'systems'  are  themselves 
neither  calibrated  nor  validated.  In  defence  of  the  human  operator  it  may  reasonably  be 
countered  that,  for  all  that,  the  ’system'  appears  to  work  and  achieve  its  objectives 
quite  well.  The  credit  for  this  must  be  attributed  to  the  high  degree  of  adaptability 
exhibited  by  human  beings,  in  other  words  man  is  able  to  compensate  for  his  own 
shortcomings.  Such  thinking  may  provide  a  valuable  clue  to  the  way  in  which  progress 
towards  the  validation  of  IKBS  may  be  made. 

Thus,  the  first  important  step  is  the  realisation  and  acceptance  that  the  anything 
that  would  remotely  approach  an  acceptable  standard  of  formal  validation,  in  the  conven¬ 
tionally  understood  sense,  is,  for  IKBS,  impossible.  Secondly,  it  should  be  recognised 
that  if  current  standards  of  human  performance  are  regarded  as  acceptable,  there  is  no 
reason  why  higher  standards  should  be  required  of  intelligent  systems  (although,  of 
course,  they  are  highly  desirable),  provided  that  the  IKBS  achieve  those  similar  levels 
of  performance  overall  and  not  merely  in  some  artificially  limited  domain.  Since  the 
human  pilot  achieves  his  acceptable  overall  performance  through  an  ability  to  adapt  and 
to  cope  with  his  own  shortcomings  why  should  not  IKBS,  which  are  also  highly  adaptive, 
emulate  the  self-assessment  and  self  correction  of  the  human  being?  Hence  conventional 
formal  validation  would  be  replaced  or  at  least  supplemented  by  self-val idat ion .  In  order 
to  achieve  this  IKBS  will  need  to  apply  criteria  of  "reasonableness"  to  evolving  solu¬ 
tions,  indeed  it  is  possible  to  visualise  the  development  of  concepts  that  are  not  domain- 
specific  but  which  can  be  used  to  provide  an  indication  that  solutions  are  developing 
within  appropriate  and  acceptable  bounds.  Such  a  module,  once  developed,  might  be  quite 
widely  applicable  to  a  broad  range  of  intelligent  systems  -  conventional  numerical  tests 
could  be  included  where  appropriate  and  would  form  a  natural  subset  of  the  symbolic 
processing  procedures.  By  this  means  IKBS  could,  in  principle,  be  validated  to  give 
performance  of  at  least  similar  standard  to  that  attained  by  human  operators. 

4.6  Knowledge  Acquisition. 

It  is  already  a  matter  of  common  experience  in  the  development  of  ordinary  expert 
systems  that  knowledge  acquisition  can  represent  a  major  problem.  Indeed,  validation,  in 
the  sense  of  confirmation  that  the  knowledge  actually  built  into  the  system  truly  repre¬ 
sents  that  culled  from  the  human  expert,  is  also  a  problem  in  knowledge  acquisition. 
However,  for  the  present,  it  is  reasonable  to  trust  that  that  will  be  solved  as  far  as  is 
possible  by  careful  procedural  checks.  The  less  tractable  issues  arise  from  the  widely 
different  approaches  adopted  by  equally  competent  experts,  from  the  need  to  ensure  that 
all  the  relevant  knowledge  of  the  experts  is  explored  123)  and  in  relating  the  knowledge 
to  the  level  of  expertise  that  the  IKBS  assumes  in  the  pilots  with  whom  it  is  to  interact. 

Incompatibility  between  experts  is  a  widely  recognised  problem  in  IKBS  and  airborne 
applications  are  in  no  way  exempt,  as  is  implicit  in  the  time-honoured  dictum,  "If  you 
want  3  opinions  try  asking  2  pilots".  At  first  the  temptation  is  to  attempt  to  "average" 
in  some  fashion,  the  different  approaches.  Assuming  that  the  approaches  are  genuinely 
irreconcilable,  this  procedure  is,  by  definition,  doomed  to  failure.  Furthermore,  the 
idea  of  applying  'cut  and  splice'  techniques,  adopting  one  expert's  approach  for  part  of 
the  problem  and  later  changing  to  another's,  clearly  holds  dangers  of  discontinuities, 
possibly  quite  subtle  in  nature,  that  should  spell  caution  in  other  than  quite  special 
circumstances .  Thus,  once  irreconcilable  differences  have  been  established  a  decision  to 
adopt  the  approach  of  a  single  expert  rather  than  an  amalgam  ol'  several  is  likely  to  be 
preferable.  This  could  be  viewed  as  an  elitist  rather  than  a  committee-based  approach. 

It  does,  of  course,  imply  the  need  for  exceptional  care  in  the  choice  of  expert. 

Often,  however,  the  choice  may  lie  between  expert  approaches  that  are  of  equal 
standing  but  which  differ  strongly  in  character.  One  could  think  of  flying  styles  that 
might  be  summed  up  as,  say,  ’vigorous’  or  ’methodical’,  for  example,  equivalent  but  very 
different.  Clearly,  just  as  one  style  is  the  hallmark  of  a  particular  expert  so  it  will 
suit  pilots  who  feel  an  affinity  for  that  type  of  approach.  Conversely,  the  other  extreme 
they  might  find  irritating.  Yet  by  relying  upon  one  or  other  expert  in  building  the 
knowledge  base  such  characteristics  would  inevitably  become  built  into  the  system  - 
eventually  a  sophisticated  IKBS  might  be  said  to  incorporate-  some  elements  of  a 
personality.  It  would  be  counterproductive  to  inflict  upon  a  pilot  an  IKBS  with  a 
’personality*  that  was  alien  to  him  and  the  remedy  might  be  to  provide  alternatives  - 
either  contained  within  a  single  IKBS  or  as  options  selected  when  the  system  is  briefed 
before  the  start  of  a  mission. 

If  an  IKBS  is  to  be  accepted  as  a  genuinely  intelligent  aid  it  must  command  the 
respect  normally  accorded  to  an  intelligent  companion.  In  particular  it  should  appreciate 
any  change  in  the  experience  or  expertise  of  the  pilot  and  modify  its  interaction 
accordingly.  To  enable  it  to  do  this  means  must  be  provided  for  it  to  monitor  the  pilot's 
characteristics  in  some  way.  Whilst  this  represents  something  of  a  challenge  it  is  likely 


to  be  essential  if  IKBS  are  to  be  regarded  as  anything  but  rather  dim-witted,  after  all 
no-one  would  have  much  time  for  a  human  companion  who  took  no  note  of  increases  in 
experience,  or  perhaps,  of  the  fact  that  a  similar  event  has  already  occurred  earlier  i 
the  mission. 

Ensuring  that  all  the  relevant  knowledge  and  especially  that  all  appropriate 
heuristics  are  culled  from  the  expert  and  incorporated  in  the  IKBS,  is  a  seemingly 
obvious  consideration  and  yet  it  is  a  potentially  serious  error  that  could  be  both  orr 
and  unappree  i  at  od .  Quite  often  an  expert  is  unaware  of  the  heuristics  he  employs  ar.d 
indeed  it  is  not  unusual  for  an  expert  to  have  an  incomplete  or  erroneous  . dca  of  the  w 
he  tackles  a  task.  Such  factors  are  well  known  pitfalls  in  knowledge  acquisition.  on«- 
virtue  of  using  more  than  one  expert,  at  least  initially,  is  that  it  may  reveal  in com¬ 
pleteness  in  the  knowledge  base  derived  from  other  experts. 

In  a  large  and  complex  domain  the  use  of  several  different  experts  to  cover 
individual  aspects  of  the  problem  is  inevitable  and  this  will  clearly  be  the  case  for  a 
ambitious  intelligent  cockpit  system,  with  separate  experts  covering  control,  ESM,  nav; 
tion,  weapons,  etc.  Not  only  does  this  require  especial  care  when  defining  interface:: 
also  entails  the  need  for  special  vigilance  to  ensure  that  nothing  at  the  edges  of  a 
domain  is  inadvertently  omitted. 

5  SUMMARY  -  THE  ROAD  TOWARDS  UNMANNED  AIRCRAFT 

In  the  course  of  this  paper  we  have  examined  the  thinking  that  leads  towards 
unmanned  aircraft  and  by  looking  at  the  breathtaking  pace  of  progress  in  IKBS,  comput  m 
and  electronic  data  handling  have  confirmed  that  the  technology  required  to  achieve 
intelligent  autonomous  unmanned  aircraft  is  likely  to  be  achievable. 

Fortunately,  an  evolutionary  course  is  both  possible  and  desirable.  Indeed,  i i  - 
gress  towards  unmanned  aircraft  involves  discrete  steps  that  are  of  such  modest  propor¬ 
tions  as  to  form  a  quasi-continuum.  No  great  breakthroughs  are  called  for  but,  none the 
less,  the  sum  total  of  the  discrete  steps  cohstitutes  a  formidable  challenge.  T.sus  the 
path  lies  through  initially  discrete,  relatively  simple  systems  with  relatively  modest 
pretensions  to  intelligence  but  which  build  confidence  and  provide  experience  m  IKBS, 
more  ambitious  systems  which  interact  strongly  amongst  themselves  and  with  the  trad  it  ic 
deterministic  aircraft  systems  to  provide  the  more  complete  contextual  awareness  that  : 
one  of  the  hallmarks  of  a  sophisticated  intelligent  system.  As  further  confidence  is 
gained  greater  autonomy  will  be  granted  to  the  IKBS  and  fewer  decisions  will  be  re  for re 
to  the  pilot.  The  way  to  complete  autonomy  and  unmanned  aircraft  is  then  clear. 

REFERENCES 

The  IKBS  literature  is  already  vast.  In  most  cases,  therefore,  the  references 
given  are  typical  examples  of  sources: 

1  KUCK,  D  J,  DAVIDSON,  E  S,  LAWRIE,  D  H  ami  SAMEH,  A  H,  "Parallel  Supcrccrq  at  i  n 
Today  and  the  CEDAR  approach"  SCIENCE,  211,  061  (1086) 

2  GUPTA,  A,  "Parallelism  in  production  systems  -  the  sources  and  the  expected 
speed-up"  in  Expert  Systems  and  their  applications,  6th  International  Workshop,  1 
25  (1965) 

3  HALSTEAD,  R  H,  "Parallel  Symbolic  Computing"  COMPUTER,  August  1966  ,  p3r- 

4  GABRIEL,  R  P,  "Massively  Parallel  Computers:  The  Connec t if >n  Machine  ami  Non-V^n" 
SCIENCE,  231 ,  975  (1966) 

5  See,  for  example,  special  issues  of  APPLIED  OPTICS  such  as;  2^  No  10  (May  1'»66); 

25  No  14  (July  1966);  25  No  16  (September  1966) 

6  EICHMAN,  G  E  and  CAULFIELD,  H  J,  "Optical  learning  (inference)  machines"  APPLIED 

OPTICS  24,  2051  (1985) 

7  SMITH,  S  D,  "Lasers,  non-linear  optics  and  optical  computers"  NATURE  116,  319 
(1985) 

8  MADA,  H,  "Architecture  for  optical  computing  usinq  holographic  assoc  i  at  :v  memoi 
APPLIED  OPTICS  24,  2063  (1985) 

9  BURTON,  G  J,  HAIG,  N  D  and  MOORHF.AD,  1  R ,  "A  self-similar  stack  model  for  human 
and  machine  vision"  BIOL  CYBERN  ^3,  397 

10  POHI.MAN,  L  D  and  PAYNE,  J  R,  "Pilots  Associate  Demonstration  One:  A  look  back  am' 
ahead"  IEEE,  NAECON  Proceedings  1986  ,  pi  186 

11  SHELNUTT,  J  B,  STENERSON ,  R  O,  NELSON,  P  C  and  MARKS,  P  S,  "Pilots  Associate 
Demonstration  One:  A  look  inside"  IEEE,  NAECON  Proceedings  1986  ,  pi  184 

12  KANDEBO ,  S  w,  "Lockheed  Stresses  Crew  Participation  in  Pilots  Associate 
Development"  AVIATION  WEEK  and  SPACE  TECHNOLOGY  7  July  1986,  pill 


h-i: 


MORISHIGE,  R  I  and  RETELLE,  J,  "Air  Combat  and  Artificial  Intelligence,  AIR  FORCE 
MAGAZINE,  October  1985,  p9l 


14  GILMORE,  J  F,  SEMECO,  A  C  and  L'AMSHERANGKOON ,  P,  "Knowledge-based  route  planning 
through  natural  terrain"  SPIE  548 ,  128  (1985) 

15  FRANKOVITCH ,  K,  PEDERSON,  K  and  BERNSTEEN,  S,  "Expert  Systems  Applications  to  the 
Cockpit  of  the  90s"  IEEE  AES  Maga2ine  January  198b,  pi  3 

16  WILBY,  A  and  RICHARDSON,  D,  "Advanced  Technologies  Play  Key  Role  in  Designing 
Future  EW  Systems”  MSN  and  CT  September  1985,  p66 

17  Nil,  H  P,  FEIGENBAUM, E  A,  ANTON,  J  J  and  ROCKMORE,  A  J,  "Signal  to  Symbol 
Transformat  ion :  HASP/SIAP  Case  Study"  AI  Magaz  ine  Spi' ing  '\9&2 ,  ..<23 

*  18  Nil,  H  P,  "The  Blackboard  Model  of  Problem  Solving"  AI  Magazine,  Summer  198b  pit* 

19  See,  for  example,  BARR,  A  and  FEIGENBAUM, E  A,  "The  Handbook  of  Artificial 
Intelligence"  Vols  I,  II,  III  w  KAUFMAN,  INC  (Uol) 

I  20  REYNOLDS,  D,  "From  Development  to  Delivery  -  System  Integration"  KBS-8b  (Online 

[  Publications)  p3t>  1  ,  (1986) 

f  21  TAKEDA,  M  and  GOODMAN,  J  W,  "Neural  networks  for  computat ion :  number  representations 

*  and  programming  complexity"  APPLIED  OPTICS  .25,  3033  (1986) 

*  22  SMITH,  D  E  and  SEEMAN ,  S  E,  "Application  of  Automated  Reasoning  Software:  Procedure- 

Generation  System  Verifier"  ANS/ENS  Fast  Reactor  Safety  Meeting  Knoxville,  USA 
f  April  1983  p!61 

2  3  GAGLIO,  S,  MINCIARDI ,  R  and  PULIAFITO,  P  P,  "vtiH:nerson  Decision  Aspects  in  the 
Construction  of  Expert  Systems"  IEEE  Trans  SMC-15  536  (1985) 


GENERATING  DIAGNOSTIC  KNOWLEDGE 
PROM  A  STRUCTURAL  AND  FUNCTIONAL  DESCRIPTION 


Jean- Pascal  ALBERT 
Jean-Michel  CORNJLLE 
Alain  MELI.ER 

Laboratoires  de  Murcoussis 
Centre  de  Recherches  de  la  C  G  E 
Route  de  Nozay 
91460  -  MARCOUSSIS 
FRANCE 

ABSTRACT 


Our  paper  deals  with  the  problem  of  diagnostic  knowledge  acquisition.  Vie  present  a  front-end  to  a  diagnostic  sy-ar' 
under  development,  that  provides  aides  to  the  expert  in  the  process  of  diagnosis  rules  design.  This  front-end  uses 
structural  and  functional  modeling.  It  seems  to  be  general  enough  to  be  applied  to  other  applications  that  we 
characterize. 

J.  Introduction 

Our  application  concerns  the  maintenance  of  an  aircraft  Navigation  System  (NS).  This  system  is  divided  mto 
physical  units,  called  LRUs  (Line  Replaceable  Unit),  tthen  the  pilot  has  noticed  something  wrong  during  a  flight,  the 
ground  technician  must  find  and  change  the  failed  LRUs  to  get  the  aircraft  back  in  an  operational  state. 
Maintenance  is  quick  if  he  is  able  to  find  failures  by  making  simple  tests  by  himself.  The  aim  of  the  expert  system 
is  to  assist  the  technician  in  his  job  in  order  to  avoid  the  use  of  a  specialized  processor  whirh  tests  the  plane 
systematically  but  immobilises  the  plane  for  a  long  period . 


1.1.  Previous  work 

A  tirst  version  of  the  expert  system  was  created  [2j.  Its  knowledge-base  was  made  up  of  : 

(1)  knowledge  about  the  LRUs,  such  as  the  replacement  cost  and  the  probabilities  of  known  failures. 

(2)  knowledge  about  the  tests  including  the  cost  of  operating  and  diagnosis  rules  m  the  lorm  : 

(fO)  conjunction  of  tests  results  conclusion 
The  conclusion  part  either  suspects  or  discards  possible  component  lailvires. 

The  general  strategy  used  »  onsists  in  choosing  the  operation  (test  or  replacement)  that  minimizes  the  average 
probabilistic  cost  of  a  repairing  session. 


1.2.  Criticisms 

This  system  was  criticized  by  the  maintenance  experts  on  the  following  points  : 

(1)  no  distinction  between  tests  and  repairs  ;  they  were  «  ondicfercd  together  as  operations  bv  the  optimization 
strategy. 

(2)  application  of  r he  single  lailure  hypothesis, 

( *)  difficulties  enc  ountered  by  the  expert  in  providing  the  elements  ot  the  diagnosis  ;  tests  and  diagnosis  tules. 

I.J.  Current  work 

The  FLAG  2  system  under  development  is  meant  to  answer  these  criticisms. 

In  this  paper  we  torus  on  the  problem  of  building  the  diagnosis  rules.  This  required  considerable  eMort*.  from 
the  expert  in  compiling  knowledge  spread  throughout  the  wiring  diagram  and  maintenance  documents.  Therefore 
only  a  small  part  of  the  NS  was  represented  in  the  previous  system. 

To  address  this  problem  wo  choose  to  free  the  expert  Irom  this  burden,  providing  him  instead  with  the  wav  to 
describe  the  elements  of  the  NS  and  related  knowledge  through  the  use  of  a  Knowledge  Acquisition  Svstem 
(Fig.  1).  This  KAS  allows  a  strur  tural  and  functional  description  of  the  NS  from  which  test  interpretations  are 
generated.  Such  an  interpretation  is  a  set  of  imphc. ations  of  the  following  form  : 

(fl)  <*ingle  test  result>  and  <condifion.s>  <concltisions> 


2.  The  KAS 

2.1.  Structural  and  functional  description 

The  expert  describes  the  NS  in  a  hierarchical  and  structural  wav  as  long  is  lie  possesses  such  knowledge,  after 
which  he  decomposes  it  in  a  functional  way. 


#  This  fccfurrh  been  supported  toy  OKI  1  f  tench  Defence  Ministry*  and  hm  been  worked  on  will'  A  tinny  M 
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This  dev  n  pi  ion  maps  into  the  building  of  a  net  of  black  boxes  linked  by  causal  dependent  ;es.  Boxes  originate 
through  either  the  structural  description  of  a  component  or  a  functional  one. 

Causal  dependent  les  are  flagged  b>  contexts  that  determine  their  existent  e  or  not.  In  our  <  use.  some  contexts 
are  determined  by  selecting  inodes  of  devices.  Modes  are  the  different  functioning  setups  m  a  component, 
figure  2  shows  a  relay  with  its  structural  and  functional  representation  and  the  re-ailimg  three  dependent  ies  ; 
one  is  permanent,  the  others  are  respectively  set  in  the  "ON"  and  "OIT"  relax  modes. 

These  dependen*  ies  may  possess  a  type.  In  our  application,  Cl  -dependf  <  ies  are  those  existing  between 
.  omponents  m  the  state  of  Good  Eunctionning  (GF)  ;  actually,  the  strut  tural  links  between  de\  i<  es  map  to 
dependencies  oi  this  type.  BF -dependencies  (Bad  Functionning  dependencies)  are  originated  m  the  knowledge  of 
failures  causing  irregular  dependent  tes.  BF-related  flagging  contexts  rnjv  oe  set  on  the  condition  that  some 
<  omponents  have  not  been  discarded  lrom  the  set  of  suspect  t  omponents. 

'A hen  setting  a  context  relies  on  local  conditions  on  input  or  output  values  jt  component  terminals,  a 
propagation  model  in  the  equipment  mav  free  the  expert  from  expressing  su<  h  knowledge  as  : 

<k7iowledge  of  the  global  state  of  the  equiprnent>=^<selectt'd  contexts 

In  our  case,  selecting  any  context  of  this  type  is  equivalent  to  selecting  component  modes.  Therefore  the  model 
couid  be  restricted  to  the  propagation  of  mode  controls.  In  tac  t  it  is  larger  as  the  expert  knows  lot  a;  transfer 
functions  enabling  the  computation  of  outputs  from  inputs.  For  the  relax  (fig  2)  we  kru  *  that  :  .1  of  28 Volt 
then  the  "ON"  mode  is  selec  ted  ;  otherwise  the  "OI  F1-  mode  is  selected.  Propagating  a  value  tor  e 3  w.n  enable 
this  selection. 

Knowledge  of  possible  outputs  for  component  terminals,  without  assuming  good  fu.K  tion.ug,  ,x  also  part  of  this 
model. 

1.2.  Diagnosis  knowledge 

Three  kinds  of  diagnosis  knowledge  are  expressed  by  the  expert  : 

knowledge  concerning  the  definition  of  the  units  that  support  the  diagnostic  (the  "gram"  of  diagnose.  )  and  how 
they  are  oositioned  in  the  structural  and  functional  description.  This  definition  is  either  unpin  it  or  explicit.  It 
is  implicit  because  the  diagnosis  decomposition  matches  with  the  structural  and  functional  one.  It  is  explicit 
when  the  decomposition  is  trade  only  for  diagnosis  purposes.  Analogical  deuces.  tor  example,  are  often 
decomposed  m  several  modules  representing  characteristic  test  values. 

( 2 )  knowledge  used  for  suspec  ting  components  on  which  the  interpretation  of  false  test  relies.  A  <  omponent  wh;  be 
suspect  : 

(a)  if  it  takes  part,  in  GF.  to  the  production  of  the  tested  output. 

(b)  if  its  fail.  ire  may  explain  the  bad  functioning  oi  a  component  suspec  ted  a.  <  or  ding  to  (a). 

(3)  knowledge  used  to  validate  a  component  on  which  interpretation  of  true  test  relies.  Knowing  that  a  component 
output  is  correct  the  problem  is  to  express  : 

(a)  which  parts  of  the  component  arc  known  to  be  active, 

(b)  which  parts  may  be  validated, 

(<  )  w-tuch  inputs  are  known  to  be  correct. 

The  knowledge  (c )  provides  a  way  of  propagating  backwards  the  symbolic  value  "ok"  IS)  and  sometimes  is 
assorted  with  an  inverse  transfer  function  enabling  the  propagation  of  a  numerical  value.  The  process  of 
validation  mav  proceed  backwards  as  long  as  it  is  possible  to  propagate  "ok".  In  the  case  of  the'  relay,  "high"  is 
selected  if  s  (fig  3)  /  and  s  /  e(  and  consequently  e1  "ok"  (for  "low"  respectively  s  /  e1  and  s  /  e$  and 
consequently  e,  -  "ok").  "Cominorris  selected  in  every  case  on  condition  that  "low  and  "high"  have  already 
been  validated.  Moreover  if  "high"  is  selected  we  know  that  e  28Votts  (respectively  for  "low"  we  know  that 
c  s  /  28Volts). 

2.3.  Additional  diagnosis  knowledge 

The  expression  of  failures  associations  provides  pointers  to  cases  of  multiple  failures  known  by  the  expert.  They 
will  be  used  by  the  repairing  system  and  are  not  involved  in  the  compiling  process  leading  to  f  1  forms. 


3.  Aided  test  interpretation 

The  KAS  provides  a  tool  for  helping  the  expert  in  building  test  interpretations.  Their  form  will  further  allow 
their  integration  in  a  net  of  non-monotonic  data  dependencies  that  is  the  skeleton  ol  the  diagnosis  system. 

3.1.  False  test 

The  interpretation  ol  false  test  proceeds  as  follows  : 

(1)  When  an  observed  output  is  bad,  the  set  E  of  the  components  that  participate  in  GF  to  the  production  of 
this  output  must  be  suspected.  This  set  is  built  going  back  through  the  active  GF-depcnden<  ies  starting  from 
the  output  point.  They  are  found  by  selecting  the  associated  context  propagating  mode  controls  m  the 
equipment. 

(2)  The  set  S  of  suspec  ted  c  omponents  is  made  up  of  those  whose  failure  can  explain  the  improper  functioning  of 

E  components.  Obviously,  we  have  both  E  G  S  and  those  components  which  can  explain  a  P>F  by  coupling. 

Tfce  later  may  be  suspec  ted  given  the  non-validity  of  certain  other  components,  and  determined  by  taking 
BF-dependcncies  into  account. 


Thus  the  interpretation  is  built  as  a  set  of  implications  : 

(  < false  le»t>=>  csuspected  components 

( f‘2 )  |  <false  tesl>  and  conditions  =&  <ftispected  components 

The  expert  can  then  effect  an  analysis  by  withdrawing  or  adding  susprc  ted  i  omponents.  or  even  bv  validating 
some. 

True  test 

The  basis  of  the  interpretation  of  a  true  test  lies  m  the  validation  knowledge  expressed  bv  the  expert.  Various 
interpretations  arc  possible  and  must  be  determined  interactively.  A  true  test  observed  at  s  may  give  rise  to 
many  interpretations.  Concerning  the  relay  we  have  seen  that  "common"  validation  is  dependent  on  the  validity 
of  "high"  and  "low",  and  that  their  validation  relies  on  conditions  that  deal  with  the  output  v  and  the  inputs  e. 
and  e  . 

t 

Let  us  assume  that  the  conditions  s  /  e^,  s  /  e^  and  s  /  e }  cannot  be  evaluated  because  knowledge  of  the 
possible  output  values  are  not  available  prior  to  input  e ] . 

Various  interpretations  can  thus  bo  envisaged  : 

(I)No  additional  hypothesis  is  added  in  relation  to  the  test  specifications.  In  such  a  case,  no  component  i  uii  be 
validated  and  it  is  not  possible  to  continue  the  validation  by  "working  backwards"  through  the  <  ire  uit. 

< 2) If  we  hypothesize  that  HI  and  LI  are  valid,  then  it  is  possible  to  validate  "common". 

(VALID  HI)  and  (VALID  Ll)=>(VALID  Coml) 

Consequently  o  ^  "ok"  ;  it  is  now  possible  to  work  back  towards  the  re  Jay  2  where  nothing,  however,  can  be 
accomplished  without  making  another  hypothesis. 

(3) Let  us  assume  that  the  possible  output  value  are  available  prior  to  e  and  that  we  make  the  hypothesis  that  the¬ 
se!  of  modules  belonging  to  Xcl  are  valid.  Eventually  a  value  for  c  may  be  computed.  Consequently  it  s  /  e. 
and  s  /  e ,  we  will  know  that  LI  is  valid  and  working  backwards  through  Xc2  with  e„  "OK"  (and  o.  s)  will 

be  possible. 

In  this  -  ase  we  would  have  at  least  : 


I  (VALID  c.)  =S  (VALID  LI) 

r,£XP  1  1 

(MLet  us  add.  to  the  previous  case,  the  hypothesis  that  HI  is  valid.  In  this  case  we  realise  that  Coml  is  valid  and 
that  it  is  possible  to  work  backwards  starting  liom  p(  with  a  control  value  ol  the  mode  oi  LI  known  to  be 
uc  five.  This  allows  the  validation  of  H2,  L2  and  Com2.  Consequently  : 

I  (VALID  c  )  and  ( VALID  HI)  =>  (VALID  1.1)  and  < VALID  112)  and  (VALID  1.2)  and  (VALID  Com 2) 
<• ,  £  x  H  * 

During  the*  repairing  session  certain  modules  might  be  validated  and  the  prec  ceding  instances  of  implications 
would  trigger. 

Vie  realise  from  this  example  that  a  great  deal  of  conditional  interpretations  are  possible.  Mar y  of  then,  would 
not  be  of  any  use  in  that  either  they  assume  the  validity  of  a  great  number  of  components  t.magino  several 
hundred  modules  c  omprismg  Xel)  or  no  test  capable  ol  making  the  conditions  true  exist'..  Tlv*  choice  of  useful 
interpretation  is  left  to  the  expert.  The  resulting  test  interpretation  will  have  the  Knowing  form  : 

(  ctrue  test>  <valid  components 

(f.'i)  J  <true  te.st>  and  <condittons>  <va(id  components 


it.  Contributions  of  KA5  and  conclusions 

As  for  application,  contribution  of  KAS  is  very  positive  : 

( 1 )  It  allows  the  expert  to  express  his  entire  knowledge  concerning  the  equipment 

(2) Mrs  knowledge  is  better  exploited.  Conditional  test  interpretations  (fl  form  <)  have  the  same  expressive  power 
than  diagnosis  rules  relying  in  test  results  conpinc  ts  (fO  forms).  However,  building  every  interesting  such 
ronioiKtive  form  revealed  unfeasible,  and  loci  the  expert  to  suspect  moie  « ompenents  than  necessutv. 

( 3)  The  developed  representation  scheme  enable's  other  aides  to  be  created,  notably  those*  » on<  nurd  win  test 
generation. 

believe  die  KAS  is  general  enough  to  be  applied  to  other  fields  having  suet*  similar  characteristic  s  as  : 
,  There  is  no  well-established  physical  model  as  a  descriptive  basis  that  allows  one  to  reason  Irom  "tirst 
principles"  |3).  The  interactions  between  LKl  s  are  generally  electrical  but  <  an  bo  mechanic  al.  even  th  i:  ,i. 
.  There  is  a  close  relation  between  structural  and  func  tional  description  ol  the  equipment  and  the-  description  oi 
the  "gram"  ol  the  diagnostic.  In  fact,  the  later  is  embedded  in  the*  lormrr.  As  these  two  aspects  .,m  so 
interwoven,  the  expert  remains  indipensable  to  describe  the  material. 

.  The  diagnosis  knowledge  can  bo  compiled  prior  to  operating  the  repairing  system  Tins  uppruac  h  is  not  alwavs 
feasible  particularly  in  domains  where  a  strong  need  for  hierarchical  diagnostic  reasoning  would  in.pl\  an 
unpractical  volume  of  compiled  knowledge,  as  every  ire  Irn  al  decomposing  depeMwhng  on  diagnostic  contexts 
would  have  to  be  envisaged. 
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Figure2  .  On  the  left:  sluctural  and  functional  description  of  ih#  relay  on  the  nght  *h*  t 
dependencies  with  their^^e|  amCuEEID  and  the  difterent  diagnostic  units 
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SUMMARY 


Expert  Systems  are  being  applied  in  many  areas  of  business,  f  i  nance.  medicine,  and 
engineering  and  have  the  potential  of  being  embedded  in  guidance  and  control  systems. 
The  key  r<-  development  of  an  Expert  System  is  the  development  of  its  knowledge  base.  A 
fundamental  premise  >'f  Expert  Systems  is  that  knowledge  about  how  to  solve  problems  in 
the  f  rob  Jem  domain  of  the  Expert  System  is  available.  Knowledge  engineering  is  the 
process  of  acquiring  this  knowledge  and  incorporating  the  knowledge  into  the  Expert 
System.  T h *-•  knowledge  engineering  process  is  divided  into  the  following  parts:  acqui¬ 
sition  of  the  knowledge,  implementation  of  the  knowledge  using  computer  tools,  testing 
.t  the  knowledge  base,  and  revision  of  the  knowiedge  base  based  on  the  test  results. 
This  paper  provides  an  overview  of  all  parts  of  the  knowledge  engineering  process.  The 
baste  types  of  data  structures  used  for  represent  ng  knowledge  in  an  Expert  System  a:*'- 
described,  including  production  rules  and  frames.  The  computer-based  tools  available 
•  •  ■  *  assisting  engineers  in  acquiring  and  testing  knowledge  bases  are  discussed.  This 
includes  describing  t  be  general  capabilities  arid  features  o  f  t  tie  different  types  of 
rxf'-rt  Syr.  t«*n-  development  The  pajor  concludes  by  discussing  the  validated  <1 
Expert  systems  an  i  smiv  '-rit  icoi  t<-  guidance  and  control  applications. 

BACKGROUND 


Exper*  System  <  'ac  f.pt:;  which  v*-*re  originally  developed  for  tasks  an  medical  diag- 
’  •  i  so «  ge- ..  j  eg  ,  ,il  datri  i  n  t  er  pret  at  i  on  W' )  ,  and  configuring  computer  systems  i  1]  are 

i  w  b*-* ,  ng  apt  lied  i  ri  areas  of  engineering.  Examples  of  engineering  applications,  which 
have  been  described  over  the  past  few  years  in  conferences  and  journals,  are  integrated 
manu  f  g<  t  m  u.g,  automated  VLSI  layouts,  maintenance  d  i  agnos  1 1  cs ,  data  fusion,  battlefield 
management,  autoj,.  mous  land  vehicle  navigation,  and  pilot  decision  aiding.  I n  addition 
'•  r he  s  e  engineering  appl icat ions,  this  Artificial  Intelligence  technology  has  appiieu- 

*  :  : f  tc  air-iatf  guidance  and  control  systems,  specifically  flight  control  M),  route 
I  lanr-ing  ;  l>  •  .  and  integration  with  t  fie  crew  station  (6,7J.  Expert  Systems  embedded  in 
M.ese  systems.  havi>  the  potential  of  increasing  the  flexibility,  adaptiveness,  and  opera- 
ti'>nai  rang*-  of  t  hese  systems. 

A  rr.)  i-  r  dis*in<  tion  hr*t  wi'*»r.  an  Expert  System  and  today's  con  ven  t  lona  1 1  y  structured 
••■r  |  r  'irart  ;  •.  *  he  E  X|  er  f  yst*-m  knowledge  bast*.  one  of  the  early  reports  ( 8  J  on 

•  !..  ♦  a:.  Exferf  Syst.gr  desci  i  bed  t  fie  role  t.f  knowledge  in  an  Expert  System  as 


"An  Expert  System  is  an  intelligent  computer  program  that  uses  knowledge  and  in¬ 
ference  pr<  |i,r  es  t-.  solve  prol/lerns  that  are  difficult  enough  to  require  sigmfi- 
arif  human  expertise  f  <  *  r  their  solution.  The  knowledge  necessary  to  perform  at 

,  -  a  level,  }  lur.  the  inference  pi .  .cedures  used,  can  be  tfiought  of  as  a  model  of 

t  .be  *•*  x  t « •  r  t  j  •  f  Me  n,.-;t  j  i  a  t  t  i  t  i  ■  1 1  .*  r  s  <f  the  field. 

I  r:  •-  xrn.w  ,  «•<!«!♦■  >  ♦  an  Expert  System  c.insist.-  of  facts  and  heuristics.  The  facts 

n dilute  a  •  .,dy  -  I  inf  or  mat  s  -n  that  is  widely  shared,  publicly  available,  and 
rofjei  ii»v  agreed  upon  by  experts  i  i,  a  field.  The  heuristics  are  mostly  private, 

.  •».*  fi  -  *.e  a  r  I  g.  i  d  ud  g,  •  n.ef,  t  !  rules  of  plausible  reasoning,  rules  of 

j-  ‘  i  ,<  o.  .  i  j  fail  *  e  j  j  ?i  -x|  c  i  t  ■  I  eve  I  decision  making  n  the  field.  The 

s  .  •  *  **•»•.  .•  f  a  n  !  xp«‘  i  t  S  y  •:  t  e  ri,  i  .*»  |  r  i  in  1 1  r  i  1  y  a  fund  ion  of  the  size  nmf 

pel.  MV  *  fh'  Kr:  w.-dge  base  that  it  possesses." 

M».  i  i  .»  •*..■  k  *  wiedje  b  a  ->  »■  i  f  ti«-  essential  f-li'itu-i.t  of  an  Expert  System,  these 

•  are  j  ,  r  •  *  .•  r  r  * •  ••  1  ’  •  a--  K  m  w  1  e.  I  ;■  based  Sy  st  errs  . 

1  !T  i'll'-  :  in  Exf»*r*  y.iiir.  .  s  sh«  wn  in  figure  1.  The  structure  is 
f  i .  •  t  i ,r  e  i :  t  i.  j  ,i*  is  i  k,|..  tc  • 1 .  i  -  •  e  and  Mu*  inference  engine.  Tfie 

(  mm  ■  » •  ••  ;  i  i  t  .  !>■  .i  i-.t  irs,  -md  }  i  •  M  err.  s»  d  v  z  ng  rules  for  t  he  domu  l  n 

a  ,*  l  .  a  i  y  »r.  -  y-’ert. .  {  },e  infer*  fee  cii  ’inc  is  the  procm.lurf'  for 

ig«-  ft-*  i  \  i  |  .if  '  !■  nlar  so  blem.  The  km  w  ledge  base  is  uni  (pie 

*  i.n  1  iv  a  , :  #  M-e  infer*-:.  »•  engine  may  he  •■<frm<>n  to  a  number  ■  f 


b  . «  •  k  s 


i  •  •  * 
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GENERAL  STRUCTURE  OF  EXPERT  SYSTEM 
FIGURE  I 

Working  Memory  contains  the  declarative  knowledge  about  the  particular  problem 
being  solved  and  the  current  state  of  affairs  in  the  attempt  to  solve  the  problem. 
There  are  several  ways  to  represent  data  in  working  memory:  predicate  logic, 
frames,  and  semantic  networks.  These  representations  are  described  below. 

Domain-Specific  Problem  Solving  Knowledge  contains  relationships  between  several 
pieces  of  data  in  working  memory.  These  relationships  establish  how  the  data  can 
be  manipulated  to  solve  problems  in  the  domain.  The  most  common  form  of  relation¬ 
ship  is  the  production  rule  which  also  is  defined  below.  In  the  knowledge  base, 
the  rules  represent  domain  facts  and  heuristics  -  judgements  of  good  actions  to 
take  when  specifics  of  the  problem  arise. 

Con^rol._S^ ra^e^^;  makes  decisions  about  how  to  use  the  domain-specific  problem 
solving  knowledge  to  solve  the  particular  problem  defined  by  data  in  working  memo¬ 
ry.  For  production  rules,  the  control  strategy  is  implemented  with  an  interpreter 
that  decides  how  to  apply  the  rules  to  infer  new  knowledge,  i.e,,  new  data  for  the 
working  memory,  and  a  scheduler  that  decides  the  order  in  which  the  rules  should  be 
app  lied. 

Explanation  Facility  involves  explaining  to  the  system  user  the  line  of  reasoning 
that  led  to  the  problem  solution.  With  a  production  rule  knowledge  base,  this  is 
often  accomplished  by  retracting  the  chain  of  production  rules  that  led  to  the 
solution  and  translating  them  into  some  form  readily  intelligible  to  the  user. 

KNOWLEDGE  ENGINEERING  APPROACHES 

The  process  of  developing  or  building  an  Expert  System  is  called  knowledge  en¬ 
gineering.  This  process  involves  obtaining  problem  solving  expertise,  building  a  knowl¬ 
edge  base  from  this  expertise,  and  implementing  the  knowledge  in  an  Expert  System.  The 
expert  ise  in  solving  problems  in  the  domain  of  the  system  can  come  from  a  number  of 
sources:  one  or  more  human  experts,  books  and  manuals,  or  simulations.  A  majority  of 
the  research  and  applications  work  devoted  to  building  Expert  Systems  has  utilized  human 
experts,  usually  one  expert,  as  the  problem  solving  knowledge  source.  This  can  be 
verified  by  reviewing  the  Artificial  Intelligence  periodicals  and  conference  proceedings 
over  the  past  decade.  In  addition  to  human  expertise,  material  in  texts  and  reference 
manuals  is  often  used  to  complement  the  human  expertise  or  to  aid  in  acquiring  knowledge 
from  the  human  expert.  For  some  complex  problems  where  limited  human  expertise  exists, 
detailed  and  extensive  simulations  of  solutions  can  provide  insights  into  "rules  of 
thumb"  and  heuristics  for  the  problem  solving  knowledge.  This  paper  concentrates  on 
reviewing  knowledge  engineering  approaches  that  utilize  human  experts  as  knowledge 
sources,  primarily  because  these  approaches  have  been  emphasized  in  the  knowledge  en¬ 
gineering  literature. 

The  key  component  of  the  knowledge  engineering  process  is  knowledge  acquisition. 
This  is  the  process  of  transferring  and  transforming  the  problem  solving  expertise  from 
the  knowledge  source  to  the  computer  program  embodying  the  Expert  System.  This  process 
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has  proven  to  be  difficult  and  has  caused  knowledge  acquisition  to  be  identified  as  a 
bottleneck  in  the  construction  of  Expert  Systems  (1,8). 


Currently,  there  are  two  methods  for  knowledge  acquisition  which  are  illustrated  in 
Figure  2  (1).  In  the  first  method  (Figure  2a),  the  expert  converses  with  a  second 
person,  the  knowledge  engineer,  who  extracts  the  expert’s  problem  solving  expertise.  In 
this  method,  the  knowledge  engineer  becomes  very  knowledgeab 1 e  about  the  way  the  expert 
solves  problems,  determines  how  to  best  represent  the  knowledge  in  the  computer,  and 
uses  this  representation  to  develop  the  knowledge  base  and  system.  The  second  method 
(Figure  2b)  is  described  in  Reference  1  as  follows:  "The  expert  conversant  with  com¬ 
puter  technology  can  interact  more  directly  with  the  Expert  System  via  an  intelligent 
editing  program.  Here,  the  expert  converses  with  the  editing  program  rather  than  vi  i  t h  a 
knowledge  engineer.  The  editing  program  must  have  soph i s t ica t ed  dialogue  capabilities 
and  considerable  knowledge  about  the  structure  of  knowledge  bases.  This  method  replaces 
one  set  of  communication  problems  (expert  to  knowledge  engineer)  with  another  (expert  to 
program) . " 
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KNOWLEDGE  ENGINEERING  VIA  AN  INTELLIGENT  EDITING  PROGRAM 
FIGURE  2b 

This  paper  focuses  on  the  knowledge  acquisition  pricess.  The  various  data 
structures  used  for  knowledge  representation  are  described.  Then,  the  major  stages  of 
the  knowledge  acquisition  process  are  discussed.  These  sections  are  followed  by 
descriptions  of  the  types  of  software  tools  available  for  acquiring  knowledge  and  de¬ 
veloping  Expert  Systems. 

KNOWLEDGE  REPRESENTATIONS 

The  knowledge  utilized  by  an  Expert  System  typically  has  several  forms.  There  will 
be  declarative  knowledge  which  may  include  definitions  of  terms  used  in  the  problems 
being  solved  by  the  Expert  System  (e.g.,  "actuator",  "aircraft  attitude",  "waypoints") 
and  descriptions  of  objects  and  their  relationships  to  each  other  (e.g.,  “MP  is  a 
mission  plan  with  targets  Tj  and  T^")*  There  will  be  problem  solving  knowledge  (e.g., 


"If  lateral  path  deviation  is  greater  than  one  mile  and  next  waypoint  is  less  than  five 
miles,  then  go  direct  to  next  waypoint"). 
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Artificial  Intelligence  researchers  have  applied  the  Expert  System  concept  to  a 
variety  of  problems  and  have  established  a  number  of  ways  to  represent  knowledge  (9]. 
Experience  has  shown  that  no  representation  by  itself  is  efficient  for  all  types  of 
knowledge.  Some  representations  are  better  suited  for  declarative  knowledge  and  others 
for  problem  solving  knowledge.  First  order  predicate  logic,  semantic  networks,  and 
frames  are  the  most  widely  used  representations  for  declarative  knowledge  while  pro- 
»  duction  rules  predominate  in  the  representation  of  problem  solving  knowledge.  A  combi- 

(  nation  of  production  rules  and  frames  has  been  used  recently  in  a  number  of  Expert 

I  System  development  tools  to  provide  the  flexibility  needed  for  representing  knowledge  in 

a  wide  variety  of  applications  | 10,11). 

This  section  describes  four  ways  of  representing  knowledge.  This  includes  descrip- 
*  ,  tions  of  their  data  structures  and  the  advantages  and  disadvantages  of  each  representa- 

t  ion. 

First  Order  Predicate  Logic 

!  One  of  the  earliest  areas  of  research  in  Artificial  Intelligence  (AI)  was  in 

theorem  proving  which  developed  first  order  predicate  logic.  In  this  representation, 
facts  and  relationships  are  represented  as  predicates,  for  example,  "Caesar  was  a  ruler" 
and  “A  Roman  was  a  person"  are  represented  as  "ruler  (Caesar)"  and  "for  all  x,  Roman  (x) 
>  person  ( x ) " . 

First  order  logic  is  appealing  because  there  are  formal,  t heorem- prov j ng  type 
>  procedures  for  deducing  conclusions  from  the  set  of  predicates.  The  resolution 

'  ,  principle  (12)  is  a  method  for  making  deductions  that  is  most  often  associated  with 

First  Order  Logic.  This  method  has  given  rise  to  many  of  the  ideas  behind  the  AI 
‘  programming  language  PROLOG. 

'  ,  There  are  several  reasons  that  first  order  predicate  logic  is  a  useful  representa¬ 

tion.  Expressing  facts  in  logic  is  the  most  natural  way  for  some  applications.  Logic 
is  precise  -  with  formal  methods  available  for  drawing  conclusions  from  the  facts. 
Logic  is  flexible,  has  well-defined  semantics,  allowing  facts  to  be  expressed  in  a 
simple  way  without  having  to  consider  their  possible  use.  Logic  is  modular  -  new  facts 
can  be  incrementally  added  to  the  knowledge  base  without  adversely  effecting  the  deduc¬ 
tions  of  the  system. 

’  One  disadvantage  of  first  order  logic  is  the  fine  grained  structure  of  its  repre¬ 

sentation  making  it  difficult  to  define  complex  objects  and  relationships  and  difficult 
for  the  domain  experts  and  knowledge  engineers  to  understand.  A  second  disadvantage  is 
difficulties  in  combining  logic-based  declarative  knowledge  with  heuristics  needed  for 
problem  solvinq.  This  is  especially  acute  in  problem  domains  involving  larqe  combina¬ 
toric  search  processes. 

Serna n tic  Networks 

This  way  of  representing  knowledge  is  based  on  a  network  structure.  A  semantic 

(network  consists  of  points  called  nodes  which  are  connected  by  links  called  arcs.  The 

arcs  describe  the  relations  between  the  nodes.  Nodes  stand  for  objects,  concepts,  or 
events.  Two  often  used  arcs  tor  representing  relationships  are  "isa"  and  "has-part" 
[91. 


A  simple  example  illustrating  nodes  and  arcs  of  a  semantic  network  is  shown  i  r; 
Figure  3.  Two  of  the  facts  shown  in  this  example  are,  "The  F-4  is  a  fighter"  and  "A 
fighter  is  an  airplane".  Because  of  the  relations  defined  by  the  arcs,  a  third 
statement  can  be  inferred  from  the  network,  "The  F-4  is  an  airplane". 


SIMPLE  SEMANTIC  NETWORK  OF  AN  AIRPLANE 


FIGURE  j 


Relations  such  as  "  isa"  and  "has-part"  establish  a  property  miier  1 1  an<-e  hierarchy 
in  the  network.  This  means  items  lower  in  the  network  can  inherit  properties  Iron 
objects  higher  up  in  the  network.  For  example,  in  the  examole  of  Figure  .1 ,  the  naviga¬ 
tion  system,  flight  control  system,  and  inertial  system  are  stored  once  at  the  aircraft 
level,  but  inherited  at  the  lower  levels  tor  each  t ype  of  aircraft.  Use  of  inheritance 
arcs  saves  huge  amounts  of  computer  memory  apace. 

Semant ic  networks  are  a  very  popular  representation  scheme.  The  node -and- arc 
structure  match-up  with  the  symbols  and  pointers  used  in  symbolic  computat ion  arul  have  a 
natural  compat  ibi  1  lty  with  the  association  relationships  defined  1  ri  the  psyh«>  1  ouy 
studies  of  memory.  Semantic  networks  are  a  useful  way  to  represent  knowledge  foi 
problem  domains  that  have  well-established  taxonomies.  This  is  why  semantic  networks 
have  been  successfully  used  in  natural  language  research  [15].  lu  i  t  n-u  1 1  ies  urine  when 
semantic  networks  are  applied  to  large,  complex  problems  where  there  are  usually 
problems  in  interpreting  the  semantics  of  the  network  structure  | ‘i  |  *  These  problems  .m 
reduced  through  aggregated  network  structures  like  frames  which  are  disnissHi  next. 

Frames 

A  frame  is  a  data  structure  for  representing  an  object  «»r  classes  of  objects.  I  i . « 

data  structure  has  fields,  usually  called  slots,  used  to  describe  the  attributes  ■>/  the 
object.  Some  frames  in  a  frame  system  are  used  to  provide  generic  descript  ion:-.  f 
objects.  For  example,  a  generic  airplane  frame  may  have  slots  for  attributes  suet,  u 
the  number  of  engines,  cabin  configuration,  cockpit  layout,  and  physical  dimensions.  A 
frame  for  a  particular  airplane  has  the  same  slots  -  inherited  f rom  the  generic  t t a me 
with  the  contents  of  the  slots  fully  specified. 

A  frame  structure  can  have  an  inheritance  mechanism  similar  to  semant  1  netwmks. 
Specialized  slots  in  a  frame  can  establish  a  property  inheritance  hierarchy  among 
frames,  which  allows  information  about  a  parent  frame  to  be  inherited  by  its  children. 
This  is  similar  to  the  inheritance  relationship  in  an  "isa”  arc  of  .1  semantic  network. 
With  this  inheritance  feature,  a  system  of  frames  can  be  organized  much  like  ,1  semant  :• 
network  where  each  node  in  the  network  is  a  frame,  the  topmost  nodes  t  epr ef-.n  M  na 
general  concepts,  and  the  lower  nodes  being  specific  instances  of  these  frames .  Ir  I'uny 
frame  systems,  a  slot  can  have  subslots  of  its  own,  i.e.,  a  slot  nas  a  frame  .trie  t'.jo. 

The  attributes  described  in  the  slots  and  the  propet ty  inheritance  f.ierirchy  :  > 

frame  represent  static  facts  about  the  object  or  classes  of  ob  loots.  isun-ev  « n  1 1  s- 
have  a  dynamic-  or  procedural  behavior  winch  is  achieved  by  .itt.uluiKi  rr-rw  t  >■;  ;i  ••  cdure* 
to  slots  in  the  frames.  These  procedures  are  refer  red  to  as  attached  pi  ■ -  - 1  •  ••  i  v .  r .  I: 

general,  there  are  two  types  of  attached  procedures  f  Q  ' :  an  !  t  -  Needed  p/  C',ro  »•  1 1 

executes  when  details  need  to  be  filled- in  about  the  sl-»  .in«1  an  It  Ad-teg  1  1  .■  ••a* 

executes  when  the  value  of  a  slot  has  changed. 

Major  advantages  of  a  frame  system  «»re  t  he  f '  >  I  lowing:  :  r> :  -  r»»»atc-«n  r.  r  •  »  h  t  t 

or  class  of  objects  is  located  together,  accessing  and  man  1  pu  i  at  *.  no  ‘he  1  r>  1  in'  1  •  • 

easier.  the  inheritance  feature  minimizes  duplication  >  t  1  c  i  n-.» »  ?  -  n  .  1  r  -  =  •  >1  •-  t 

the  knowledge  base,  and  values  for  the  object's  attributes  an*  oi  .-at  ,*•:  who:  •  -  «■.*•-  J .  *•< 
main  disadvantage  of  frames  is  that,  except  f  t  .t »  t  u*  b**d  ir-.cd-.’e  1  • 

inherent  capability  for  utilizing  their  data  for  ir-b.eir  t  ■  1 '  1 1  •  j  . 

I  rod  ucjf  i  <2H  P  u  l  e  s 

A  production  rule  consists  of  an  II  pat  !  and  1  Mil-N  pait.  If  y* 

set  of  conditions  under  which  the  actions  m  the  IMN  jar*  -  t  *  h* 
general,  the  ruin  structure  is  as  follows: 

l  F  Conti  1 1  ion  l  .  f’nnd  it  nm  .? ,  .  .  .  ,  1  <  an!  1 1  mii 

TMKN  Art  ion  !  ,  A'-t  :  on  . . Aft  lot-  :» 

where  the  conditions  and  actions  as*-*  putt*  -rhs  »  v  !  •  r  : 

In  the  typical  Kxper  t  Systen.  the  tunc  no*  c.  1  'u  *  •  s 

problem  solving  know  I  edge .  There  arc  tw  met*.'  c 

cessing  th«>  rules:  forw.ird  fhananq  and  ba<  kw.i'd  .  r.ai: j. 

In  forward  '•haininq,  the  inference  engi.;«-  •  ■  >rni  at  t  ».«•  t  1  ? 

the  conditions  of  the  various  rules  and  1  1  if.  t.  1  1  :  e ,  <•  .  .  • 

rule  whose  conditions  are  matched.  It  t  In  > aid  1  •  .  ‘  i<  ■  •  •  1 

a  con  f  J  nt  re  so  I  u  f  ion  me  t  hod  is  1;  t  1  1  1  zed  t  -  determine  w  !  a  t  • 

fires,  t  tie  tacts  associated  with  its  .jettons  .it  ••  •»  ld>  1  *  • 

pot  en  f  i  a  (  I  y  f  r  1  gge  r  o  t  he  r  rules.  This  me  t  h  •  ■<!  •  !  irn  1  i  I  * 

because  t  he  rule  conditions  are  being  matctied  igctic. t  **♦  :  i  *  . 

Forward  chaining  is  viy  usclnl  111  1e.1l  t  :m*  g  (  ie  i*  .  ;• 
f  fie  rules  cafi  represent  ev*T»f .'  response  type  kn-wledg.  . 

In  backward  <  ha  1  n  1  nq ,  the  syst  err  s  t  a  r  *  •  wj  •  I.  .1  t.  vp  •*!-»*-».■«•  i  1 
1  a  r  t  - '  t  t  he  rule*;,  and  finds  if  one  r . }  t  h.  •  *•  u  1  1 .  ic  .  r .  -  ;  .  *  *  >■ 

takes  t  he  .  otid  >  f  1  oris  of  t  fie  appllrah,’ e  tuJe.  make--,  Men  -  . .  1  - 1  -  s  .  a  f 

whose  a  1  t  1  ■  >n  v.  would  satisfy  I  i.nsr  suluinri  |  s  ,  I  hi-  (  r  -  *  •> j  *■  *  •  :  •  . 
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and  subgoals  match  the  known  facts.  This  method  is  called  goal-driven  reasoning. 

Of  the  current  methods  of  representing  knowledge,  rules  are  the  most  widely  used 
way  for  representing  problem-solving  knowledge.  They  are  often  thought  of  as  relatively 
independent  pieces  (or  chunks)  of  know-how.  This  is  the  type  of  know-how  psychologists 
feel  humans  use  for  perception  and  thinking.  Rules  have  been  effective  for  represen t ing 
the  following  types  of  knowledge  experts  use  in  solving  problems:  preferred  problem¬ 

solving  tactics,  plausible  intermediate  steps  to  take  in  finding  solutions,  and  just 
plain  shortcuts  found  from  experience: 

Some  of  the  reasons  production  rules  are  effective  in  knowledge  representation  are 
the  following  (9]: 

•  Modularity  -  rules  can  be  added  or  deleted  without  changing  the  other  rules  in 
the  knowledge  base 

•  Uniformity  -  because  of  their  rigid  structure,  rules  can  be  easily  understood 
by  other  people  besides  the  expert  and  knowledge  engineer  and  they  can  be 
efficiently  processed  by  the  inference  engine 

•  Naturalness  -  the  rule  format  is  an  easy  way  for  a  human  to  express  certain 
types  of  knowledge,  in  particular  what  to  do  in  predetermined  situations 

The  modularity  and  independence  features  of  rules,  which  make  them  attractive  for 
particular  types  of  problem  solving  knowledge,  make  rules  less  efficient  for  represent¬ 
ing  objects,  their  attributes,  and  their  static  relationships  -  representations  handled 
efficiently  by  frames.  In  a  rule  system,  the  representation  of  an  object  or  object 
attributes  is  distributed  over  a  number  of  rules  with  dependencies  between  rules.  The 
data  structure  that  can  be  naturally  associated  with  objects  is  lost  when  compiled  in 
the  form  of  production  rules. 

The  complementary  nature  of  production  rules  and  frames  has  been  recognized  and  is 
being  used  to  increase  the  effectiveness  of  Expert  Systems.  A  later  section  of  this 
paper  discusses  how  some  computer  programs  designed  as  tools  for  the  knowledge  acquisi¬ 
tion  are  combining  frames  and  production  rules  for  hybrid  representations.  Frames 
represent  objects  and  their  relationships  that  are  referred  over  rules.  This  simplifies 
the  rule  sets  in  exchange  for  the  added  complexity  of  a  frame  system  and  the  increased 
complexity  of  the  inference  engine  which  must  process  frame  data  as  well  as  rules  and 
facts . 

THE  MAJOR  STAGES  OF  KNOWLEDGE  ACQUISITION 

There  is  no  established,  well-defined  process  for  developing  the  knowledge  base  for 
an  Expert  System.  Since  the  mi d- 1 970 ' s ,  when  the  concepts  for  Expert  Systems  were 
formulated  as  part  of  research  into  Artificial  Intelligence  methods,  there  has  been 
considerable  study  of  knowledge  acquisition  processes  1  1 ,  M , 1  f>  1  ,  but  only  guidelines  are 
available  defining  a  knowledge  acquisition  methodology.  Guidelines  have  evolved  from 
work  ranging  from  theoretical  studies  to  empirical  system  development  and  these  guide¬ 
lines  are  in  general  agreement.  They  agree  that  t  Vie  knowledge  acquisition  process  has  a 
number  of  phases,  or  stages,  on  what  the  stages  should  be  and,  in  general,  on  what 

should  he  a r comp 1 i shed  in  each  stage.  This  section  will  describe  these  stages  of  the 

knowledge  acquisition  process,  drawing  heavily  on  material  in  References  1  and  1  (> . 

The  knowledge  acquisition  process  can  be  viewed  as  five  highly  interdependent  and 
overlapping  stages:  identification,  conceptual izat ion,  f orma 1 l za t ion ,  implementat ion, 

and  testing.  figure  4.  which  is  borrowed  from  Reference  1,  illustrates  these  stages  and 
hew  they  interact.  In  general,  the  process  is  incremental  -  acquiring  knowledge  for 
solving  simple  problems  in  the  Expert  System's  domain  and  expanding  this  knowledge  t<; 
solve  harder  problems  in  the  domain.  The  incremental  approach  involves  but  Id i no  a 

prototype  knowledge  base  and  using  some  form  of  Expert  System  development  to  test, 

evaluate,  and  refine  t  fie  knowledge  base. 

I  den  t  i  f  i  cat  i  on  s  t  arje 

The  initial  slip  in  acquiring  knowledge  is  establishing  tue  mpm  tunt  features  of 
t  tie  .  lasses  of  problems  that  wi  1  1  be  solved  by  the  Kxper  t  System.  This  involve*;  idenf  i 
f  tying  t  to*  d«  ima  in  expert  t  •  t  experts!  who  will  pa  r  t  I  c  i  pa  *  e  in  the  k  n<  <w  1  edge  ai  qu  i  s  i  1  i  on 
|ji  )i  t'ss.  The  knowledge  engineer  works  with  the  domain  expert  during  this  initial  stage 
•  ,  adequately  define  the  problem  domain  S"  .development  of  the  knowledge  base  can  login. 

Problem  identification  includes  identifying  the  type  and  scop***  of  pt  i  Moms  being 
solved.  An  informal  .  ha r  <n  t e r  i za *  l <  n  of  the  terms  describing  the  problems,  key  <  on - 
-epfs,  and  how  »o  divide  the  problem  into  subp'l  ob  1  ems  is  established.  The  goals  •  i 

.  d,  iei  fives  f  the  Expert  System  are  defined.  Examples  <d  Expert  System  goal?,  are  the 

f  ■  1  1  >>W  I  let  :  1»  apt  ur  1I|.|  t  tie  expertise  of  a  key  expert  in  t  tie  o  r  gan  1  /  a  t  i  on  ,  tor 

example,  a  guidanie  system  designer.  gyro  te'hnictan.  or  flight  control  system  mamfe 
nance  e  x|  e  r  t  .  •  maria- r ;  ng  »  tie  data  displayed  on  the  *  o.  kp  i  t  displays,  and  ’  '  pruning 

r  he  .  t  spa.*-  ■  •  *  r  r  t  ier  r  o  r  v  >p  t  nn  i  /  .!  t  i  on  algorithm. 
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STACES  OF  KNOWLEDGE  ACQUISITION 
FICURE  4 


Conceptualization  Stage 

During  conceptualization,  the  knowledge  engineer  and  domain  expert  decide  what 
kinds  of  concepts  and  relations  are  needed  to  describe  problem  solving  ideas  in  the 
domain.  Conceptualization  includes  exploring  problem  solving  strategies,  dividing  the 
problems  into  subtasks,  and  characterizing  problem  constraints. 

This  stage  involves  extensive  interactions  between  the  knowledge  engineer  and 
expert  and  develops  the  essential  elements  of  the  knowledge  base.  The  interactions  with 
the  expert  must  include  specific  examples  of  solving  prototype  problems.  Getting  an 
expert  to  provide  accurate  verbal  descriptions  (protocols)  of  his  own  personal  problem 
solving  process  is  difficult.  Some  Artificial  Intelligence  researchers  recommend  some 
form  of  organization  be  employed  in  the  knowledge  engineer  -  domain  export ( s I  inter¬ 
views,  such  ns  a  thinking  aloud  protocol  and  related  methods  from  t he  area  of  problem 
solving  psychology  (17]. 

The  knowledge  engineers  may  find  it  useful  or  necessary  to  diagram  or  organize  the 
concepts  and  relationships  arising  from  the  interact  ions  with  the  expert.  Producing  a 
"paper  knowledge  base"  consisting  of  English  sentences  representative  of  the  concepts, 
relationships,  and  problem  solving  strategies  from  the  protocols  recorded  during  the 
interviews  is  part  of  one  organization's  knowledge  acquisition  methodology  (  1 ]  .  A 
paper  knowledge  base  starts  making  the  knowledge  structure  clear  during  the  conceptuali¬ 
zation  stage.  It  can  also  aid  in  establishing  the  granularity  needed  in  the  knowledge 
base,  i.e.,  to  what  level  of  detail  the  knowledge  needs  to  be  represented  to  solve 
problems  in  the  domain. 

Formalization  Stage 

The  formalization  process  involves  mapping  the  major  concepts,  relations,  sub- 
problems,  information  flow,  and  problem  solving  ideas  into  a  formal  knowledge  repre¬ 
sentation  framework.  The  knowledge  engineer  takes  a  more  active  role  in  the  inter¬ 
act  ions  with  the  domain  expert(s),  describing  to  him/her  the  knowledae  structures  and 
problem  solving  paradigms  that  appear  compatible  with  the  problems  in  this  domain.  As 
progress  is  being  made  in  solidfying  a  knowledge  represent  at  5  on  framework,  selection  of 
an  Expert  System  development  tool  with  a  knowledge  representat ion  arch i torture  com¬ 
patible  with  the  framework  is  selected.  If  a  development  tool  was  already  selected, 
because  of  project  schedule  constraints,  development  of  the  knowledge  representation 
framework  takes  into  account  the  representation  capabilities  of  the  selected  tool.  'I  ho 
output  of  the  formalization  stage  is  a  s»  t  of  partial  spot  ifirations  describing  how  the 
know ledge  base  can  be  represented  within  the  chosen  Expert  System  development  tool. 

There  is  disagreement  among  Artificial  Intelligence  pract j t inner s  on  how  elaborate 
an  initial  knowledge  base  framework  is  required  before  .-.tort  inq  to  prototype  mi  an 
Expert  System  development  tool.  Many  advocate  quickly  puttino  together  a  preliminary 
concept  of  the  knowledge  base,  implementing  it  in  a  prototype  system,  and  shaping  and 
determining  a  good  knowledge  base  framework  and  structure  through  what  is  learned  from 
the  expert  interacting  with  the  prototype  f  1  <>  |  .  Others  advocate  providing  more 
structure  in  the  formalization  activity  before  prototyping.  These  advocates  feel  the 
implementation  constraints  present  in  a  prototype  system  will  prevent  convergence  on  an 
efficient  knowledge  base  structure  if  commitment  to  prototyping  is  premature! 
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Methodologies  designed  to  place  structure  in  the  knowledge  base  formulation  process 
concentrate  on  uncovering  the  underlying  knowledge  base  structure,  structure  of  the 
problem  solving  knowledge,  domain  objects,  relationships  between  objects,  and  con¬ 
straints  of  the  problem  domain.  These  methodologies  typically  involve  mapping  the 
verbal  data  collected  during  the  sessions  with  the  expert  into  an  implement  at  ion- inde¬ 
pendent  description  of  the  domain  knowledge  (18,19].  The  descriptions  are  high-level, 
abstract  representations  of  the  problem's  knowledge  structure  and  are  distinctly  dif¬ 
ferent  from  the  knowledge  representation  languages  (frames,  rules,  etc.)  discussed 
above.  The  descriptions  consist  of  typologies  of  basic  elements  and  structuring  rela¬ 
tionships  for  certain  classes  of  porblem  solving  tasks.  The  basic  elements  will 
typically  be  objects,  relat ionships ,  dynamic  operations,  and  knowledge  structures  that 
guide  the  selection  and  use  of  these  operations  (19).  The  formalization  process  con¬ 
sists  of  repeated  cycles  of  elicitation  and  analysis  of  verbal  data  from  the  expert 
aimed  at  refining  the  top-level  description  of  the  knowledge  base. 

The  decision  on  whether  to  prototype  as  soon  as  possible  or  to  utilize  some  form  of 
structured  method  for  formalizing  a  knowledge  base  structure  before  prototyping  depends 
on  the  project  objective  and  duration.  If  the  objective  is  to  show  the  feasibility  and 
performance  of  an  Expert  System  for  the  problem  domain  and  with  a  limited  project 
budget,  prototyping  as  soon  as  possible  is  recommended.  A  structured  approach  for 
determining  the  knowledge  representation  framework  takes  time  and  may  contribute  little 
to  demonstrating  feasibility  and  projected  performance.  If  the  objective  is  the  com¬ 
plete  development  of  an  Expert  System,  a  structured  approach  to  developing  a  sound 
knowledge  representation  framework  for  the  problem  domain  is  recommended.  A  good  under¬ 
standing  of  the  knowledge  representation  framework  is  essential  for  the  knowledge  base 
maintenance  activities  required  for  validating  the  Expert  System  and  later  for  updating 
it  with  new  knowledge  during  its  operational  use  [20]. 

Implementation  Stage 

The  implementation  process  turns  the  formalized  knowledge  into  a  working  computer 
program.  The  domain  knowledge  made  explicit  during  the  formulation  stage  is  implemented 
on  the  Expert  System  development  tool  using  the  knowledge  representation  capabilities  of 
the  tool.  Implementation  includes  integrating  the  operations  of  the  different  parts  of 
the  prototype  Expert  System,  i.e.,  working  memory,  problem  solving  knowledge  base, 
inference  engine,  and  explanation  facilities  so  the  system  functions  properly  for  test¬ 
ing. 

The  implementation  stage  should  proceed  rapidly,  especially  for  a  feasibility 
project,  because  the  objective  is  to  check  the  effectiveness  of  the  concepts  and  knowl¬ 
edge  representation  structure  developed  during  the  conceptualization  and  formulation 
stages.  The  implementation  will  change  as  the  testing  of  the  prototype  progresses. 

The  variety  of  Expert  System  development  tools  that  can  be  used  for  the  implementa¬ 
tion  and  testing  stages  are  discussed  in  the  next  section. 

Testing  Stage 

The  testing  stage  involves  evaluating  the  knowledge  base  and  the  knowledge  repre¬ 
sentation  framework  using  the  Expert  System  development  tool.  The  domain  expert 
evaluates  the  performance  of  the  prototype  system  and  helps  the  knowledge  engineer 
revise  the  system.  The  system  is  tested  with  problems  that  cover  the  domain  including 
prototypical  cases  and  hard  cases  expected  to  probe  the  domain  boundaries. 

Many  revisions  of  the  knowledge  base  part  of  the  system  are  expected  during  testing 
to  attain  the  performance  expected  by  the  expert.  There  may  also  be  modifications  to 
the  inference  engine;  although,  these  are  expected  less  often.  Revisions  may  require 
revisiting  the  earlier  stages  of  the  knowledge  acquisition  process.  Typically,  the 
revisions  will  occur  in  the  following  order: 

1.  Refinement  of  the  prototype  system  by  adjusting  production  rules,  working 
memory  characterizat ions ,  and  the  inference  engine's  control  mechanism  until 
the  knowledge  base  gives  the  expected  performance. 

2.  If  refinement  doesn't  converge  to  acceptable  performance,  redesign  of  the 
knowledge  representation  framework  developed  during  the  formulation  stage  and 
acquisition  of  additional  or  new  knowledge  through  further  expert  -  knowledge 
engineer  interviews. 

3.  If  the  difficulties  are  so  serious  that  knowledge  base  redesign  and  prototype 
refinements  are  not  adequate,  serious  mistakes  in  identifying  or  conceptualiz¬ 
ing  the  problem  have  occurred.  It  may  be  necess'ary  to  rescope  the  problem, 
provide  additional  data  or  information  to  the  system,  or  re-evaluate  the 
system  goals  or  objectives. 

In  addition  to  evaluating  the  performance  of  the  knowledge,  the  utility  of  the 
Expert  System  built  around  the  know)-  ig<  base  is  evaluated.  The  interface  to  the  user, 
whether  a  human  user  or  another  system,  is  evaluated  for  efficiency,  i.e.,  are  the 
system  solutions  organized,  ordered,  and  presented  at  the  right  level  of  detail?  Also, 
the  time  for  computing  solutions  is  assessed  to  determine  if  the  system  will  be  fast 
enough  to  satisfy  the  us'r.  The  assessment  can  be  actual  measurements  of  solution 
times,  if  the  prototyping  computer  system  will  be  the  operational  system;  otherwise,  the 


solution  time  is  estimated  based  on  the  processing  architecture  of  the  operational 
hardware.  If  the  solution  times  do  not  meet  user  requirements,  there  are  a  n umbel  <  f 
options:  more  efficient  implementations  of  the  knowledge  base  and  inference  engine,  use 
of  a  traditional  procedure-oriented  programming  language  such  as  Ada  nr  FORTRAN  for 
implementation  or  reformulating  the  knowledge  representation  structure  and  acquiring 
more  problem  solving  heuristics  from  the  exp<  rt  to  reduce  the  amount  of  compulations 
required  of  the  inference  engine  to  solve  problems. 

EXPERT  SYSTEM  TOOLS 

Expert  System  tools  are  programming  systems  that  aid  in  the  task  of  implementing 
and  testing  the  knowledge  elicited  from  the  domain  expert  or  experts.  These  programming 
systems  range  from  very  high-level  programming  languages  to  low- level  support 
facilities  and  can  be  divided  into  four  categories  [1,16]:  programming  languages, 
knowledge  engineering  languages,  system  building  aids,  and  support  facilities. 

Programming  Languages 

The  programming  languages  generally  used  for  Expert  System  applications  are  symbol - 
manipula t ion  languages  such  as  LISP  and  PROLOG.  The  LISP  language  is  built  around 
mechanisms  for  manipulating  symbols  in  the  form  of  list  structures.  Ihese  structures 
are  useful  building  blocks  for  representing  abstract  and  complex  concepts  needed  in  a:. 
Expert  System.  LISP  is  the  most  widely  used  programming  language  for  Expert  Systerr 
applications;  although,  PROLOG,  which  was  developed  in  the  mid-1970's,  is  gaining  in 
popularity.  The  PROLOG  ( PROgr ammi  ng  in  LOGic)  language  is  usually  based  on  a  theorem 
prover  method,  which  can  tell  if  a  given  set  of  logical  formulas  has  any  contradictions 
or  not. 

A  programming  language  offers  the  most  flexibility  for  developing  an  Expert  System 
and  implementing  a  knowledge  base;  however,  there  are  major  disadvantages.  An  extensive 
amount  of  time  and  manpower  is  required  to  develop  a  complete  Expert  System  that  has 
production  rules,  an  inference  engine,  and  adequate:  explanation  and  debug  capabilities. 
If  a  mixture  of  representation  structures  are  needed,  for  example,  both  frames  aim 
production  rules,  the  development  effort  is  even  more  extensive.  This  kind  of  develop¬ 
ment  will  be  very  inefficient  early  in  a  knowledge  acquisition  project.,  especially  if  it 
is  used  as  the  prototype  Expert  System.  S ign i f leant  1 y  less  effort  will  be  expended  it  a 
knowledge  engineering  language  offering  a  choice  of  representation  facilities  is  used 
for  mechanizing  the  prototype  Expert  System. 

Knowledge  Engineering  Languages 

Knowledge  engineering  languages  are  languages  designed  specifically  tor  developing 
and  debugging  Expert  Systems.  They  have  special  facilities  that  ease  the  development  of 
Expert  Systems,  but  are  less  flexible  than  ordinary  programming  languages.  The  computer 
programs  that  embody  these  languages  are  usually  written  in  one  of  the  two  Artificial 
Intelligence  programming  languages,  LISP  or  PROLOG,  and  are  hosted  on  computers  that 
process  these  languages.  Recently,  some  ot  the  knowledge  engineering  languages  have 
been  written  in  conventional  languages,  such  as  C,  for  hosting  on  minicomputers  and 
works  t  at  ions . 

At  a  minimum,  a  knowledge  engineering  language  provides  the  means  for  representing 
the  various  parts  of  a  knowledge  base,  i.e.,  objects,  relations,  and  problem  solving 
knowledge.  In  addition,  the  Expert  System  components  needed  for  processing  the  knowl¬ 
edge  base  representations  are  included  in  the  language.  A  know’  ’dge  engineering 
language  has  the  capabilities  a  knowledge  engineer  needs  to  develop  a  total  Expert 
System.  Reference  22  surveys  the  variety  of  knowledge  engineering  languages  currently 
ava i lable . 

Some  knowledge  engineering  languages  use  one  way  for  representing  knowledge.  0PS5 
is  a  well-known  and  well-documented  language  based  on  production  rules  I  21).  This 
language  is  a  result  of  the  extensive  amount  of  Artificial  Intelligence  research  on 
production  rule  systems.  It  has  been  successfully  applied  to  many  applications  where 
production  rules  are  an  effective  means  for  representing  the  knowledge  base. 

Recently,  knowledge  engineering  languages  have  been  developed  that  combine  the 
features  of  the  different  knowledge  representation  techniques,  i.e.,  they  combine  the 
features  of  frames,  rules,  and  semantic  networks.  These  languages  provide  the  knowledge 
engineer  a  number  of  ways  of  representing  knowledge  and,  therefore,  are  capable  of 
developing  Expert  Systems  for  a  wide  range  of  problem  domains.  These  general  purpose 
languages  have  a  number  of  choices  for  knowledge  representation,  but  are  usually 
restricted  in  the  control  mechanisms  used  in  the  Expert  System  inference  engine.  The 
more  elaborate  languages  include  a  number  of  sophisticated  AI  techniques  such  as  search 
strategies  and  knowledge  base  maintenance,  making  it  easier  for  the  knowledge  engineer 
to  implement  different  forms  of  problem  solving  strategies.  Two  examples  of  general 
purpose,  knowledge  engineering  languages  are  ART  (Automated  Reasoning  Tool)  and  KEE 
(Knowledge  Engineering  Environment)  [22]. 


Another  way  the  knowledge  engineering  languages  ease  the  knowledge  engineer's 
implementation  and  testing  tasks  are  through  specialized  user  interfaces.  The  more 
sophisticated  languages  have  many  of  the  following  user  interface  features: 
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access  to  several  types  of  program  information  through  multiple  windows  on  the 
computer  display, 

menus  and  a  pointing  device  for  easy  system  control, 

simultaneous  viewing  of  evolving  short  term  memory  and  production  rule 
execution  sequences  during  Expert  System  operation, 

graphical  representation  of  hierarchical  inheritance  relationships  in  the 
frame  system,  and 

facilities  to  incrementally  add,  delete,  and  modify  any  knowledge  base 
statement  at  any  time 

System-Building  Aids 

System-building  aids  are  computer  programs  that  help  acquire  and  represent  the 
domain  expert's  knowledge.  These  programs  are  designed  for  a  particular  problem  domain, 
have  knowledge  representations  tailored  to  that  domain,  and  possess  user  interfaces  that 
help  elicit  knowledge  from  the  domain  expert.  These  programs  often  are  designed  to 
interface  directly  with  a  domain  expert. 

Compared  with  programming  languages  and  knowledge  engineering  languages,  few  sys¬ 
tem-building  aids  have  been  developed.  Relatively  complete  system-building  aids  have 
been  developed  for  fault  diagnosis,  classification,  and  configuring  system  problems 
14,23,24).  The  knowledge  encoding  in  these  computer  programs  is  conceptually  close  to 
the  actual  expert  knowledge  and,  hence,  makes  the  knowledge  base  easier  to  construct, 
refine,  and  update.  Maintenance  of  the  knowledge  base  is  also  made  simpler  with  these 
aids . 

Support  Facilities 

Support  facilities  are  extra  software  packages  that  come  with  the  Expert  System 
development  tool  making  the  tool  easier  to  use,  friendlier,  and  more  efficient.  In 
general,  there  are  three  different  types  of  support  facilities:  editors,  knowledge 

enhancement  tools,  and  explanation  facilities. 

The  most  common  editors  are  language  editors  with  knowledge  of  the  specific  syntax 
of  production  rules  and  other  knowledge  representation  structures.  Editors  are  used 
interactively,  with  the  editor  prompting  the  knowledge  engineer  for  portions  of  a  rule 
or  declaration,  supplying  defaults,  correcting  spelling,  and  performing  type-checking  as 
necessary.  Editors  remove  the  drudgery  of  discovering  and  correcting  syntax  errors. 
More  sophisticated  editors  statically  analyze  the  knowledge  base  entered  by  the  knowl¬ 
edge  engineer,  analyzing  new  rules  to  help  find  undesirable  interactions  with  existing 
rules . 


Knowledge  enhancement  tools  analyze  the  Expert  System  computer  program  dynamically 
during  execution.  Dynamic  analyses  include  traces  of  rule  firings  and  working  memory 
modifications,  summaries  of  rule  execution  statistics,  and  the  ability  to  step  forward 
and  backward  through  the  Expert  System  execution.  The  more  sophis ticated  knowledge 
enhancement  tools  suggest  areas  in  the  knowledge  base  where  the  rules  need  to  be 
generalized  or  specialized  and  areas  where  new  rules  are  needed  to  fill  problem  solving 
knowledge  gaps. 

Explanation  facilities  attempt  to  answer  the  knowledge  engineer’s  questions  re¬ 
lating  to  Expert  System  behavior.  The  least  sophisticated  facility  uses  canned  text 
linked  to  production  rules  or  slots  in  frames.  The  next  level  of  sophistication  gene¬ 
rates  explanations  based  on  traces  of  production  rule  executions  or  frame  activities. 

VALIDATION 

The  Expert  System  concept  is  making  the  transition  from  being  a  research  idea  over 
being  a  software  engineering  technology.  Demonstrating  feasibility  and  performance  of 
Expert  Systems  for  different  applications  has  been  emphasized  during  this  transition. 
Little  attention  has  been  given  to  the  reliability  and  robustness  of  Expert  System 
software.  There  is  concern  that  Expert  Systems  developed  heur is t i cal  1 y  by  trial  and 
error  methods  will  be  inherently  less  reliable  than  conventional  software  developed  from 
precise  specifications.  Some  AI  researchers  feel  the  best  Expert  Systems  can  do  is  to 
imitate  human  experts,  who  are  themselves  imperfect  1 2b\. 

An  Expert  System  is  still  a  computer  program,  especially  when  viewed  from  the 
perspective  of  software  validation  requirements.  And,  except  for  the  separation  of 
knowledge  from  control  (the  inference  engine),  an  Expert  System  has  the  same  character¬ 
istics  as  a  conventional  computer  program.  For  example,  both  Expert  Systems  and  conven¬ 
tional  computer  programs  use  heuristics  and  "rule  of  thumb"  judgements.  The  difference 
is  that  conventional  computer  programs  embed  this  type  o>  knowledge  in  a  procedural 
implemen tat  ion . 

Today's  software  engineering  methodologies  for  developing  reliable  and  robust 
computer  programs  can  be  applied  to  Expert  System  development.  These  methodologies 
typically  divide  the  computer  program  development  activities  into  phases:  requirements 
analysis,  spec  if icat ion,  design  and  implementation,  and  test.  The  stages  of  the  knowl¬ 
edge  acquisition  process  discussed  earlier  in  this  paper  correspond  closely  with  these 
phases.  This  correspondence  is  even  closer  if  the  software  engineering  principles  of 
modularity  layering,  and  information  hiding  are  incorporated  into  the  design  of  produc¬ 
tion-level  knowledge  bases  and  Expert  Systems. 


However.  the  testing  of  an  Expert  System  is  different  t ran  that  of  a  <  on’ 
computer  program.  First,  an  Expert  System  often  exhibits  non-dot ernun is t  it* 
because  the  pieces  of  the  knowledge  base  (production  rules  and  frames!  strung 
by  the  inference  engine  to  solve  problems  are  determined  during  system  executiM 
makes  the  system  behavior  unrepeatable  for  dynamic,  time-varying  problems  ant' 
fore,  makes  the  system  difficult  to  debug.  Second,  there  is  no  precise  :nj:>i 
relationship  for  production  rules  as  there  are  for  procedures  in  convent lorial 
programs.  This  makes  it  difficult  to  use  input-output  analysts  (or  testing.  i; 
number  of  ways  production  rules  can  be  activated  is  too  large  to  be  able  to  rea 
ly  generate  test  cases  covering  every  branch  in  the  program. 


Consequently,  prototyping  is  the  only  effective  way  to  test  an  l-xpett 
Experiences  of  the  experts  and  users  with  the  prototype  ran  reveal  vital  pic.t 

the  design.  However,  this  type  of  testing  can  present  a  problem  because  ; 

testinq  of  a  large  system  can  take  substantial  effort  and  t  uno. 
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Suirwia  ry 

Monitoring,  planning,  conflict  solving  and  decision  making  w  *tr  t»-df* 
carried  out  mainly  by  human  controllers.  Computer  assistance  and  ir  ;art ;  -  ,‘3r  •»>.  j •  \v  • 

Intelligence  (AI)  now  offer  the  possibility  to  support  controllers  i»>  t*eir  rnt  ' v<*  «.*<•  -■  »• 

enhance  performance  and  efficiency  in  air  traffic  control  (A'C). 

A  rule-based  planning  system  is  presented,  designed  V  av.  ;*,?  ^ -ifv 
merging  high  density  inbound  traffic  into  congested  airports. 

Topics  to  discussed  in  more  detail  i  "elude:  r.«f  i<>  f  r  *rf  -,y  ■  y  *  •  .*  < 

as  .*/£  1 1  as  the  crucial  requirements  for  the  develop. ent  of  i  ruie-t -»srr  '  *-  j  <■ 

The  rule-based  system  developed  by  DFVLR  uses  the  OPSS  product  i  *■  -./-.to*-  ir :  •.  ■/•/  iTif*:  • 
tier*  './itl.  embedded  "C"  functions.  It  should  bo  »r.ipha?ised  t*-at  Vr.  \sv*r  •.*"  v.  a:.  ■ 

The  ?:ncide:*:tions  ’'hich  led  to  cclcctfcn  of  suitable  rrr  grerr  r  \»''g  .^7*: r ,  ^  •wVtg*  r,..  r*.- 
*'r?r“?T  f strict  urrs  <^tc.  ere  discussed  in  detail.  The  ,lr,t.\t  •  v  ■■  •  ‘j’  *  r  '  .f 

'provonontr  are  outlined. 


T.  Trtroductior 


Despite  the  introduction  of  advanced  technical  equipment  i"  Air  traffic  lontr  .  ‘  the  t.»*>  *  •»*- 

Traffic  Control  Officer  (ATCC)  has  remained  highly  "convent iona  1"  cr  "nanuaV. 

With  the  first  generation  of  automation  in  Air  Traffic  Control,  autonatf?d  syr-tews  fv.r 
processing  and  tracking,  flight  plan  data  processing  and  for  commur icat ion  were  provided  ?  • 

However,  the  actual  control  process  still  had  to  be  carried  out  in  the  bram?  of  the  h.jnvv  c'xtr 

In  toaays  second/third  generation  of  automation  in  ATC,  advanced  ccr-ip.. ter- systems  arc  v,*c  <<■■.«■  *  v  • 

information  processing  and  planning  functions.  The  ATC  units  are  provided  with  filtered  data,  ret  »’t 
solutions,  which  assist  the  controllers  in  their  decision  making  process  (Deferences  . 

Ho v.-ever  the  appropriate  task  sharing  betv/eer.  human  controllers  and  the  computer  and  the  dhtr  'Dj»  •  * 

■f  responsibility  between  man  and  machine  has  raised  many  question;  and  problems,  yet  tc  be  solve:. 

A  rcluticn,  where  the  computer  system  works  fully  automatic,  with  the  human  controllers  jt  'j 
■-•■itnr'ni  tv-  system,  in  order  t.-j  take  over  in  case  of  system  failure,  presently  is  for  many  reasons 
-  r  vtiC’Me  -nr  acceptable. 

i-  fhe  reason  why  so  far  the  degree  of  automation  is  guided  by  the  philosophy  of  giving  computer 
'•>  * --rp  ♦hp  human  controllers.  The  systems  releave  the  controllers  of  routine  functions  and  support 
’  1  “■»■*  rrernsary  data  to  take  safe,  efficient  and  orderly  control  actions.  The  decision  making  itself 
ovnr  md  thus  the  overall  responsibility  is  still  left  to  the  controllers. 

:i*hout  changinn  this  fundamental  design  priniciple  of  computer  assistance  for  Air  Traffic  Control, 
•».  ;«•.<  -f  k rowledne-hased  systems  instead  of  pure  algorithmic  systems  now  offer  new  opportunities  for 
•  •* r  cr-rvly  nronress  of  automation  in  ATC. 

T>  .r  nossfble  to  make  use  of  the  knowledge  of  many  different  ATCO-experts,  in  particular  of 

•  •  ;  !  -'.^rational  strategies,  heuristics  and  experience,  which  are  incorporated  in  a  knowle 

,Kit  alT,ws  svmholic  processing. 

•*  r  'r-r-fit  'f  knowledge  based  system  (KBS)  concept  is,  that  it  can  be  easily  modif  i  or 


f  the  nvpi^natory  functions  of  a  KBS,  the  controller  is  able  to  ask  for  the  reasons, 
•pd  l.it ion .  Thus  more  transparency  and  confidence  \«  the  computer  generated  plan  can 


T.  '■'•on  'Jased  -  •otr* 


1 . 1  uener a  1  Architecture 


LO^>uter- Systems  that  ISilil,  Support  ;r  part',  ant  MM  r  '  -,f>  *■* M''  4it  ’*!*»*•.  *r+  - 

“e*pert- systems" .  An  t*pert  systems  in  genera’  \s  formed  ,f  the  i’ow*‘»g  ,st *m  element-, 
knowledge-base ,  that  contains  all  necessary  knom'edg*.  an  inference -etc ban  1  sa.  ehi-.n  guwes  the  pr-t  ■» 
^0  lvtng  process  an<l  makes  use  of  the  knowledge  Dase  » urtH^rmoFi  Jr~  e«pert  system  •;.onta'r,1  * 
dialogue-element.  Intended  tc  e*pla1n  the  problem  solving  process  and  if.  r*v,'t'.  the  hum#*-  ,\#r  «••• 

last  not  iefsf  -  a  know ledge-acquf s  ft  f on-elcment .  that  g'ves  the  rapajift,  t  modi**  »r  attend 

knowledge  base. 


3.?  Capabilities 


The  knowledge  base  nay  contain  a  variety  of  knowledge:  textbook  knowledge,  well  defined  mathematica’ 
functions  up  to  unstructured  human  heuristics,  acquired  by  e*per fence  over  years. 


■  <«V! 


’  ,  i'  ■  i  :*i  t 4C- 


. ..  •  *>«>  ,  ■  ■..*  • 


•v  .  1 


1  n-r  '  *  *•»■{;■  r  •  .  Vr'i  4 

•  .  r  »  t  .  r  •  t  .  »  ♦  !  ‘ 

I  »or^"i;  .» t  thnx  Ma  ' ' 


*>•  ? ****»}«» '  r  , 
,f.  i  .  .  .  -|M  . r  ,  «*>  \M 


u-w’"*"  # *hn  "■  .fer"  t *,  to  the  "inter-  uotts. 

,  •  •  1  i  ri>v  .t  !  "  earh  r  or  t  r  o  •  unit  and  must  be  coordinated 


r*r  'i  1 #  >rp  v<*ra  •  ’  ;i’a,,r'nq  criterion  and  concerted  control  action  Is  very  difficult  to 
*rhi#ve,  because  if  *h#  high  :oor  f Inat  ion  effort. 

'hr  »nf en-aMon  «f  i  variety  >f  lata  from  rwny  different  sources  has  to  be  performed  mainly  In  the 
brains  of  the  human  controllers. 

"his  leads  to  «*tremely  high  work  load  and  even  small  dl sturbat Ions  which  can't  be  matched,  may 
rws'jlf  in  a  traffic  congestion.  Splitting-up  and  distributing  this  task  to  more  control  units  would 
require  even  mr re  coordination  effort.  Therefore  It  was  envisaged  to  transfer  at  least  parts  of  the  human 
pUnr.ino  and  control  functions  to  a  computer. 


Based  upon  studies  at  Frankfurt  Airport,  a  concept  fo»*  a  computer  based  planning  system  (COMPAS), 
aiming  to  assist  controllers  In  the  comprehensive  planning  of  arriving  aircraft  was  developed,  tested  and 
evaluated  by  the  DFYLR  Institute  for  Flight  Guidance  In  cooperation  with  BFS  -  the  German  ATC-Authorlty 
/II/. 

The  essential  design  principles  of  the  COMPAS- system  can  be  described  as  follows: 

o  The  stepwise  distributed  planning  of  the  controllers  Is  substituted  by  one,  comprehensive,  overall 
computer  planning. 

o  The  computer  planning  function  anticipates  the  traffic  development  for  the  next  30  minutes  and  uses 
one  single  criterion,  common  for  all  units. 

o  Besides  the  "usual"  data  such  as  radar  position  information  and  flight  plan  data,  many  other  data 
are  Included  In  the  computer  planning  functions,  (e.a.  traffic  load  In  sub-sectors,  aircraft 
performance  and  economy,  actual  airspace-structure  etc.).  The  computer  Integrates  these  data  and 
generates  concentrated  planning  results. 

o  Cach  control  unit  Involved  is  provided  with  its  specific  planning  results,  necessary  to  carry  out 
control  and  to  play  its  part  in  the  overall  plan. 

o  The  controllers  stay  fully  In  the  loop  and  keep  their  executive  function.  In  general  the  computer 
generated  plan  is  acceptable  to  the  controllers.  However,  it  Is  possible  for  the  controllers  to 
Interact  with  the  computer  In  order  to  modify  the  p?3n. 

The  basic  structure  of  the  OTPAS-system  is  shown  in  Fig.  3.  The  operational  objectives  of  the 
COMPAS-system  are  with  regard  to  the  Frankfurt  situation: 

o  best  usage  of  runway  landing  capacity, 

o  delay  reduction  for  arrivals, 

o  to  apply  economic  descent  profiles.  If  possible. 

F ig.  4  shows  how  the  COMPAS-system  will  be  integrated  into  the  existing  ATC-system.  COMPAS  is 
designed  to  work  In  the  present  ATC-envIronment .  But  beyond  that,  actual  radar-data  and  flight-plan-data 
are  fed  on-line  Into  the  COMPAS-OP-system  via  special  interfaces.  Taking  Into  consideration  many  other 
Information  (aircraft  performance,  airspace  structure,  wind  etc.)  COMPAS  generates  a  plan  and  displays  It 
to  the  controllers.  The  controller  fray  use  these  COMP  AS -proposals,  but  is  not  obliged  to  use  the  system. 
However,  if  he  does  work  with  it,  the  results  should  be  so  reasonable  and  convincing,  that  he  easily  can 
adopt  these  proposals  for  his  control  actfons.  Under  normal  conditions  no  control ler-computer  interaction 
Is  required.  However  Interaction  is  possible,  if  the  controller  wants  to  modify  the  plan  or  if  it  is 
necessary  to  cope  with  unforeseen  events. 

The  COMPAS-system  Is  still  algorithmic  -  using  a  branch  6  bound  algorithm  -  to  find  the  optimum 
sequence  and  schedule. 

How  as  a  next  step,  a  rule-based  system  -  called  PLANAIR  was  developed.  It  is  based  upon  the  COMPAS 
system  functions,  but  Instead  of  using  an  algorithmic  optimization  function  to  determine  the  optimum 
sequence,  a  rule-based  production  system  establishes  the  proper  sequence  and  schedule,  by  making  use  of 
typical  controller  strategies  and  tactics,  with  regard  to  the  actual  traffic  situation. 


5.  The  COMPAS/PLANAIR  -  Systems -Concept 

In  cooperation  between  DFVLR-Institute  of  Flight  Guidance  and  the  University  of  Saarbruecken  a  rule-based 
planning  system,  called  COMPAS /PI AN AIR  was  developed  (References  /9/;/10/). 

The  rule-based  arrival  planning  system  PLANAIR  requires  certain  components  of  the  conventional 
COMPAS-system.  These  are  in  particular  all  kind  of  functional/mathematical  calculations,  such  as: 

o  radar  data  tracking 
o  flight  plan  data  procurement 
o  airspeed  calculation  from  radar  data 
o  economic  descent  profile  calculations 
o  arrival  time  prediction. 

The  results  of  these  calculations  are  continuously  stored  in  a  data-flle  (FZD  in  Fig.  5).  PLANArR 
makes  use  of  this  updated  data  file. 

The  following  description  of  the  PLANAIR  component  Is  based  upon  the  work  of  LUX/9/  and  HERINGER/ 10/ . 


5.1  PLANAIR-Systems  Architecture  and  Elements 

The  PLANAIR-systems  comprises  the  typical  elements  of  an  expert  system,  as  shown  in  Fig.  5.: 
o  an  Inference  element  (Interpreter), 
o  a  knowledge  base, 
o  a  dialogue  element, 
o  an  explanation  element. 


The  PLANAIR -system  Is  Implemented  on  a  VAX  In  the  0PS5- language.  The  system  comprises  about  60  pro¬ 
ductions  and  about  30  LISP  and  C-functions.  In  order  to  achieve  a  more  efficient  Implementation  of  0PS5,  a 
supplement  to  0PS5,  -the  "extended  productions"-,  were  Included  In  the  system.  They  allow  LlSP-predlcates 
In  the  condition-part  of  a  production. 

In  the  following  chapters  the  basic  elements  of  PLANAIR  are  described  In  more  detail. 


5.2  The  Inference  Element 

For  the  dynamic  planning  with  PLANAIR,  the  0PS5  language  was  selected,  because  0PS5  offered  the  must 
powerful  Interpreter  and  Is  not  limited  to  specific  application  areas.  Hybrid  tools,  such  as  KEE,  LOOPS, 
BABVLON,  ART  had  been  under  consideration,  but  have  been  ruled-out  for  this  prototype  system,  because  of 
their  great  complexity.  It  should  be  noted,  however,  that  these  hybrid  expert  system  shells  have  a  great 
potential  for  future  applications. 

In  this  paper  the  0PS5-she11  itself  shall  not  be  further  described.  However  some  of  the  advantages  of 
0PS6  with  regard  to  the  specific  requirersents  of  the  arrival  planning  system  shall  be  mentfoned. 

In  the  0PS5  productions  different  instances  of  various  object-classes  can  be  addressed  and  the 
correct  relation  between  these  elements  can  be  verified. 

Apart  from  taking  use  of  logic  attributes,  allows  also  the  processing  of  objects  witr  numerical 
values. 

OPS5  uses  a  forward  chaining  inference  mechanism,  which  is  adequate  to  solve  the  dynamic  planning 
problem  for  arrival  planning  in  ATC. 

'.’1th  the  so-railed  "extended  productions"  in  OPSS,  it.  is  possible  to  formulate  and  include  complex 
procedures  ?nd  calculations  as  l  ISP-predicates  as  left-hand  part  of  a  production  rule,  thus  allowing  to 
include  numerical  calculations  and  algorithmic  procedures  (e.g.  profile  calculations),  which  are  an 
Integral  part  in  air  traffic  planning.  They  can  be  processed  In  the  normal  rule  matching  process  of  the 
0PS5-1nterpreter . 

Sotrn  of  the  disadvantages  of  0PS5  should  also  be  mentioned.  A  main  handicap  for  OPS 5>  is  the  lack  of  a 
user  f-^ndly  progranm log  environment  and  the  lack  of  comprehensive  debugging  support. 

*n  ?ssent1al  shortcoming  of  the  incerpretor  for  dynamic  .:lvning  Is,  that  the  rule-matching 

process  can't  he  interrupted,  but  has  to  ho  completed  In  any  case!  Thu  means  in  the  case  of  ATC-planning, 
that  relevant  new  information  (e.g.  new  aircraft;  new  position;  rontrcllir  inputs)  can't  be  considered  in 
the  running  cycle,  h(t  only  tffrr  i*r.  rnr-{  )nt  ion,  in  the  next  cycle . 


c .3  The  Knowledge  Pa sc 

The  PLANAIR  knowledge  base  is  formed  of  three  parts: 

3  declarftfve  knowledge,  describing  the  air  traffic  environment, 
o  procedural  knowledge,  i.e.  the  planning  rules, 
o  text  elements  for  the  explanation  functions. 


5.3.1  Air  Traffic  Knowledge 

The  knowledge  about  the  air  traffic  Is  represented  in  the  knowledge  base  by  working  memory  elements 
as  part  of  the  0PS5-production  system. 


Static  knowledge,  that  does  not  change,  Is  formed  by  Information  on  the  airspace  structure,  aircraft 
perf ormance ,  separat  7on  data  etc.  The  declaration  In  the  working  memory  <s  made  by  the  “llteralize" 
statement,  by  which  a  class  (I.e  the  class  "aircraft")  Is  specified  with  all  Its  necessary  attributes. 

Dynamic  knowledge  on  the  air  traffic,  which  changes  continuously,  such  as:  position,  speed,  altitude 
Is  stored  in  the  same  way  as  working  memory  elements.  However,  this  part  of  the  working  memory  is 
continuously  updated. 


5.3.2  Production  Rules  -  The  Procedural  Knowledge  for  Arrival  Planning 

The  knowledge  that  Is  necessary  to  solve  the  arrival  planning  problem,  is  coded  in  OPSS  production 
rules. 

In  a  process  of  knowledge  acquisition  with  the  help  of  ATC-staff  from  the  Frankfurt  Air  Traffic 
Control  Center  some  basic  human  controller  strategies  were  Identified  and  formulated  as  "rules",  i.e. 
"productions"  In  the  0PS5  language. 

It  should  be  noted  that  these  rules  are  not  yet  comprehensive.  Additional  knowledge  still  has  to  be 
acquired.  However  the  rules  found  so  far,  already  form  a  solid  base  to  establish  an  overall  arrival 
sequence  and  schedule,  that  Is  efficient  with  respect  to  traffic  demands  and  reasonable  with  respect  to 
human  controllers  reasoning  and  decision  making. 


In  the  knowledge  acquisition  process  It  became  evident,  that  the  various  controller  strategies  or 
"rules  of  thumb"  can  be  classified  In  four  groups,  l.e.  rules,  that  refer  to: 

o  the  overall  planning  strategy, 

o  tentative  sequence  planning, 

o  tentative  arrival  tfme  planning, 

o  final  sequence/schedule  planning. 

These  four  groups  of  planning  rules  form  a  four  level  processing-hierarchy.  This  means,  that  in 
addition  to  the  basic  rules  gained  from  the  controllers,  some  more  rules  (meta-rules)  for  the  overall 
control  hierarchy  had  to  be  set  up,  which  allow  to  define,  to  modify  and  to  consider  the  hierarchy  level 
of  each  strategy.  The  productions  are  processed  according  to  their  hierarchy  levels.  This  concept  allows 
to  assign  a  higher  priority  to  specific  strategies,  depending  on  the  traffic  situations,  or  to  adapt  to 
Individual  human  controller  preferences. 


5.3..?.  1  Overall  Planning  Strategy 

PIANAIR  presently  provides  two  main  planning  strategies.  One  making  use  of  every  means  to  expedite 
the  flow  of  arrivals,  i.e.  the  planning  process  Is  based  on  the  "Earliest  Estimated  Arrival  Times".  This 
strategy  may  be  used  In  peak-periods. 

The  other  strategy  uses  the  "Estimated  Arrival  Times",  based  upon  economic  idle  descent  profiles. 
Fig.  6  gives  an  Impression  how  these  two  strategies  are  expressed  in  an  0PS5  production. 


5. 3. 2. 2  Sequence  planning  strategies 

To  establish  a  proper  sequence  of  arriving  aircraft  9  different  sequencing  strategies  have  been 
Implemented  In  PIANAIR  so  far.  According  to  the  planning  hierarchy  concept  each  strategy  has  to  be 
assigned  a  priority  level. 

The  nine  sequencing  strategies  are  as  follows: 

o  The  "F Irst-Come-F irst-Served"-  Strategy,  which  is  the  basic  strategy.  All  aircraft  are  intially  planned 
according  to  this  strategy,  before  other  sequencing  strategies  may  be  applied. 

o  The  "Del ay" -Strategy 

Using  the  delay  strategy,  PIANAIR  gives  preference  to  the  aircraft  with  the  greatest  delay  versus  Its 
scheduled  arrival  time. 

o  The  "Short-Cut" -Strategy 

In  low  density  periods  control  ler  tend  to  apply  path  shortening  manoeuvers.  An  aircraft  is  planned  to 
use  an  assigned  short-cut;  the  potential  time-saving  is  stored  In  the  air  traffic  knowledge  base. 

o  The  "Str1ng"-Strategy 

UonfroYlers  usually  try  to  establish  an  in-trail  sequence  of  aircraft  with  proper  longitudinal 
separation.  The  control  effort  for  such  "string"  then  Is  fower. 

The  PIANAIR  "string-strategy"  tries  to  maintain  strings  of  aircraft,  if  no  other  aircraft  or  strategies 
are  penalized  or  violated. 

c  The  "PI le" -Strategy 

Aircraft  merging  on  a  waypoint  at  the  same  time,  however  vertically  separated,  are  often  handed  over  to 
approach  control  as  a  "pile".  The  approach  controller  then  gives  different  vectors  in  order  to  establish 
the  necessary  separation.  If  possible,  he  tries  not  to  merge  other  traffic  Into  this  group  of  aircraft. 
PIANAIR  provides  the  same  strategy  option. 

o  The  "l ow-Bef ore-High"  Strategy 

For- several  reasons  a  controller  usually  establishes  a  sequence  with  the  lower  aircraft  first,  followed 
by  the  higher  aircraft.  This  strategy  is  part  of  the  rule-base. 

o  The  "He1flht-Rule*-Exception 

ihis  rule  allows  xo  afirdpte  the  normal  "Low-Before-High"-$trategy,  e.g.  If  the  low  aircraft  is  very 
slow,  and  a  conflict-free  descent  profile  for  the  faster  but  higher  aircraft  Is  possible. 

o  The  "Sect-  -Pr1or1ty"-Strategy 

Due "to  unbalanced  traffic  streams  from  different  directions,  traffic  demand  In  a  certain  sector  can  be 
much  higher  then  In  others.  In  order  to  avoid  congestion,  aircraft  from  high  density  sectors  are 
prefered. 

Each  of  these  strategies  Is  stored  In  the  knowledge  base  in  the  form,  of  one  or  more  0PS5  productions, 
example  for  the  "Low-Before-High" -Strategy  is  given  In  Fig,  7. 
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!- . 4  The  Planning  '.ye'e 
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•  A  rhe  Explanation  Coayonent 

The  explanation  Component  of  the  knowledge  base  contains  tc»! -e  ipment  s  *  >r  th*-  e«p  ianat  i>-n  *  !  ASA- 
reasoning  and  planning  results: 

A  text  element  has  the  following  structure 

o  class  of  text  element 
o  conditions  for  text  element 
o  string  of  text  with  placing  parameters 
o  placing  parameter  1 
o  placing  parameter  2 
c  placing  parameter  3. 

For  each  of  the  last  10  planning  cycles  the  planning  Information  about  all  active  aircraft  is  storwc 
in  a  list-file.  A  list  element  for  one  cycle  contains  the  following  information. 

c  Individual  Code 
o  Planning  Status 
o  Standard  Arrival  Route  (STAR) 
o  Earliest  Estimated  Arrival  Time 
o  Estimated  Arrival  Time 
o  Planned  (Assigned)  Arrival  Time 
o  Priority  level/class  of  text  element. 

Iff  til  this  Information  and  the  conditions  of  the  text  elements,  all  explanatory  text  can  be  generated 
If  the  controller  asks  for  an  explanation.  The  controller  calls-up  "explanation"  and  "clicks"  the 
Individual  Code(s)  of  the  aircraft.  Then  the  list-file  elements  with  the  desired  Individual  codes  are 
called  for  the  corresponding  planning  cycles.  The  planning  Information  on  that  aircraft,  which  Is  stored 
In  the  list-file,  Is  then  matched  against  the  class-  and  the  condition-parts  of  the  text  elements. 
According  to  the  productions  that  matched  and  the  placing  parameters  the  explanatory  text  In  selected  and 
displayed. 
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(p  switch. to .seq.plan.wiih.acc 

(prod  '  prod  jiame  switch  jpeed  *  prod.pri  <pri>) 
(control  JUg  *  c.vaiue  (<pri>  >=  o} 

*  c-^tep  <step> 

'  c_ace  without  .acc) 

(aircraft  ‘  ac  .delay  {>©*»} 

sc  .status  {<>  4} 

*  ac.acc.mode  {<>  *} 

'  ac.seq.time.gt  <stgtt>) 

(aircraft  *  ac_seq.Ume.gi  {<stgi2>  <=  <»tgtl>} 
ac.pian.time.gi  <ptgt2> 

►  *  ac -status  {<>4} 

*  ac.acc.mode  {<>  x} 

'  ac. delay  {<  =  O}) 

—  (aircraft  *  ac _seq.time.gt  {>  <stgt2>  <  <stgtl>} 

*  ac. delay  {<=  o}) 

—  (aircraft  *  ac. plan. time. ft  {<  <ptft2>}) 


(modify  2  *  c.vsdue  remove.eeq-tirae.ft 
cjscc  with  .acc) 

(modify  S  '  ac  _eeq.time.gt  rul  *  ae_plan.t1me.4t  nil 
‘  ac. delay  nil) 

(modify  4  ‘  ac  _seq.cime.ft  ml  *  ac.plan.time.ft  ml 
ac. delay  nil) 

(make  proof  sequence  '  pr.  pre  <stft2>  '  prjiue  <elgtl> )) 


Fig,  6  UPSS  -  Productions  for  Overall  Planning  Strategy 


(ep  two.ac in -same  .sec.  with-iame. time. deep. before Jiigh-cond 
(prod  '  prod-name  height-rule  *  .prod.pri  <val>) 
(control-flag  *  c.vaiue  {<val>  >=  0}  *  .cjtep  <step>) 
(aircraft  '  ac-seq.time.gt  {<itgtl>  <>  nil} 

*  ac. status  {<>  4} 
ac.stv  <stari> 
ac.  last -height  <hetghtl> 
ac.prio  {<=  <val>} 
ac.  plan,  time  .gt  {<>  "**}) 

(aircraft  *  ac_4eq.lime.4t  (<stgt2>  <  —  <stgtl>} 
ac  .status  {<>  4} 
ac  .star  <star2> 

’  sc  .last -height  {>  <  height  l>} 
ac.prio  {<=  <val>} 

‘  ac.plan.time.ft  {<>  «»}) 

(star  '  star  .nr  <atari>  '  Ji.mfjiamt  <mfl>) 

(star  *  star_nr  <star2>  '  -Jt.mf.name  <mfl>) 
(Seqtimc.pS  S  acjMq.time.gt  ac.seq.iime.gt 
(call  identity  <*tgl2>  <stgt2>)) 


(make  proof-sequence  *  pr.pre  <stgt2>  *  .pr-suc  <stgtt>) 
(modify  3  ‘  ec.plan.lime.gt  new  *  .ac.prio  <val>) 

(modify  4  *  ac.seq.time.gt  (compute  <etgtl>  +•  1) 

*  ac.plan.time_gt  new  *  ac.prio  <val>) 

(modify  5  *  ac _seq.time.gt  (compute  <stgt2>  -f  2) 
ac.plan.time.gt  new  *  .ac.prio  <val>)) 


Fig.  7  OPSS  -  Productions  for  "Low-before~High"-Strategy 
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..me  >r  existing  in  the  FH1.  language  are  removed  from  EM  I CAT  (S114).  For  example,  the 
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.  lf-needed, 

.  before-lnsertlon, 
.  after-insertion, 

.  before-deletion, 

.  after-deletion, 

.  before-change, 

.  after-change. 


Finally,  some  new  facilities  were  Introduced,  among  which  : 

-  the  Inheritance  scope  specification  (to  enhance  ef  f  t  c  1  me  )  , 

-  an  antl-looplng  checking  at  the  procedural  attachments  lev*-],  r  - 

defined  backward-chal nlng  strategy  easier  -  (refer  t  >  '•'-ipter  *•. 
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2.2  STATE  MEMORIZATION  5 MECHANISM 


An  expert  system  development  tool  nuat  offer  the  following  three  choice  mechanisms  [LAURENT  8 A j  : 

-  choice  of  the  state  of  the  knowledge  base  on  which  to  act, 

-  choice  of  the  rule  to  be  applied, 

-  choice  of  the  objects  on  which  to  Apply  the  rule. 

The  first  of  these  choices  Is  the  most  hard  to  implement  and  costly  to  use  because  It  requires  of¬ 
ten  bulky  information  storage  ;  that's  why  few  development  tools  propose  It. 

It  happens  that  if  this  mechanism  Is  Integrated  with  the  object  representation,  the  expert  system 
designer  has  an  elementary  tool  that  allows  him  to  program  strategies  tailored  to  the  problem  to  be  trea~ 
ted.  To  do  so,  in  EMI  CAT  (MI  4),  a  prototype  called  "Btate"  Is  predefined. 

Operations  carried  out  on  objects  are  constantly  memorized  inside  the  instance  of  prototype 
"state"  labelled  as  “current-state".  Every  time  a  backtrack  point  has  to  be  created,  a  new  Instance  of 
“current-state"  must  be  generated.  Such  a  mechanism  makes  it  possible  to  memorize  the  search  tree  so  as  to 
be  able  to  backtrack  to  any  state. 

Two  primitives  suffice  to  control  this  mechanism  : 

-  new-state(x) ,  which  Instanclates  a  new  object,  ftcwi  the  "current  state", 

-  goto(x),  which  allows  changing  of  current  state. 

Example  : 

In  orJer  to  Implement  a  strategy  for  selecting  the  best  rule  from  a  li9t  L,  when  only  the  evalua¬ 
tion  of  the  rule  allows  judging  its  interest.  It  i9  sufficient  to  write  (upper-cases  designating  the  PROLOG 
variables)  : 


strategy 

(L)^—  neuher  (R,L) 

b 

successively  selects  the  rules  to  be  tried 

new_state  (T) 

& 

creates  a  new  state  ;  return  to  the  previous  state  during 
backtrack 

apply  (ft) 

h 

applies  the  rule 

evaluate  (S) 

f. 

evaluates  the  current  state  and  store  the  results  of  the 
evaluation  In  an  attribute  of  the  object  S 

fall 

backtracking 

strategy 

(L)*—  select  (S) 

f, 

selects  the  best  state  by  analyzing  the  stored  attributes 

go_to  (S) 

fixing  of  the  selected  state 

The  generated  state  tree  is  in  this  particular  case  : 


Initial  state 


/ 


© 


\ 


(S3) 


The  Information  stored  in  each  object  and  enabling  a  state  change  is  user-accessihle  and  allows 
programming  a  strategy  such  that,  for  example,  in  the  event  of  a  deadlock  condition  the  system  returns  to 
the  state  having  generated  a  given  attribute  as  indicated  in  [VIALATTE  81)]  _ 

Since  an  expert  system  may  not  necessarily  resort  to  such  a  oenori zat ion  in  all  the  reasoning  pha¬ 
ses,  this  mechanism  may  be  turned  off  so  as  to  not  penalize  all  the  searches. 
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CHAPTER  3  :  ENVIRONMENT  FUR  PRODUCTION  RULES 


The  object  oriented  representation  alone  is  not  enough  to  develop  an  expert  system.  Tn  fact,  a 
large  amount  of  knowledge  Is  represented  more  easily  in  the  form  of  production  rules.  This  is  why  F.rUCAT 
(MI  4)  which  is  built  around  the  "PROLOG-object  oriented  representation"  pair,  Includes  an  environment  that 
allows  defining  and  using  production  rules. 

3.1  RULES  WITH  EUICAT  0114) 

The  definition  of  a  production  rule  formalism  is  subject  to  a  nun  her  of  oft».n  antagonistic  cons¬ 
traints,  that  19  : 

.  the  formalism  must  be  powerful  and  general,  but  it  must  also  be  adaptable  to  a  particular  expert 
field  so  that  the  expert  himself  can  enter  the  rules. 

.  the  formalism  must  allow  rules  to  be  written  but  also  meta-rules,  the  former  dealing  mostly 
with  the  expert  field  and  the  latter  with  the  search  strategy. 

.  the  formalism  must  be  declarative,  but  it  oust  also  allow  expressing  knowledge  of  a  procedural 
type  (search  strategies). 

To  cope  with  these  constraints,  the  basic  form  of  an  EM1CAT  (‘114)  rule  Is  a  conjunction  of  PROLOG 

goals. 


For  example,  suppose  the  rule  is  expressed  In  English  as  follows  : 

"If  the  airplane  searched  for  Is  a  delta  wing  and  carries  passengers,  Concorde  should  he  added  to 
the  list  of  suspects", 

then  this  rule  may  he  written  as  : 

Value  (atrplane_8earched_for,  wing,  delta)  L 

Value  (airplane_searched_for ,  passenger,  yes)  6 

Value  (suspect,  list,  L)  & 

Set-val  (suspect,  list,  Concorde. L). 


it  is  clear  that  such  a  formalism  although  convenient  for  the  knowledge  engineer  who  has  all  the 
power  of  PROLOG  at  his  disposal  does  not  make  exchanges  with  the  expert  easy  and,  In  any  case,  does  not  al¬ 
low  the  expert  to  enter  the  rules  himself.  This  Is  why  the  previous  form  represents  only  the  Internal  form 
of  the  rules,  usable  for  resolving  certain  specific  types  of  problems  -  such  a9  programming  a  special 
search  strategy  ;  in  practice,  the  user  can  define  each  rule  as  an  object,  Inheriting  from  the  general 
"rule"  prototype  and  having  two  attributes  : 


-  one  describing  the  "body"  of  the  rule,  provided  in  a  form  best  adapted  to  the  problem, 

-  the  other  describing  the  "translation"  of  the  rule,  applied  to  the  body  to  convert  It  Into  a 
PROLOG  goal  conjunction  (internal  form). 


With  this  approach  the  hierarchical  relationship  between  objects  iaay  he  used  to  define  families  of 
rules  the  formalism  of  which  is  adapted  to  the  type  of  knowledge  to  he  represented  ;  often  the  same  expert 
system  should  resort  to  several  formalism  simultaneously. 


The  translation  is  automatically  carried  out  when  a  rule  is  entered  or  changed  by  the  set  of 
procedural  attachments  inherited  from  the  highest  leveL  prototype  ;  thanks  to  the  use  of  operators  present 
in  most  PROLOG  Implementations,  this  translation  may  remain  simple,  while  providing  the  expert  with  an 
easy-to-raanlpulate  formalism.  For  example,  the  rule  used  in  the  previous  example  will  he  written  as  : 

object  rl 

body  if  wing  •  delta  and  passenger  ■  yes  then  suspect  (concorde) 

translation  tr  (External-rule,  Internal-rule) 

with  simply  for  the  translator  : 

tr(lf  P  then  suspect  (X),  Pi  & 
value  (suspect,  list,  L)  & 

9et-val  (suspect,  X.L) 

trl  (P,  PI). 

trl(A*B  and  R,  value  (alrplane_ searched__f  or  ,A,B)  &  Rl)  /  &  tl  (R,  Rl ) . 

trl(A“B,  value  (airplane_^searched_f or , A,B) ) . 

REMARK  : 


It  might  be  surprising  to  find  no  distinction  between  the  condition  and  action  parts  of  rules, 
which  are  the  very  essence  of  production  rules  ;  in  particular,  it  might  seem  problematic  for  determining 
the  conflict-set  formed  by  rules  applicable  at  any  given  time. 
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In  practice,  one  can  always  re-ea tabl ish  this  distinction  by  defining  an  external  ad-hoc  format  ; 
moreover,  the  many  posstbllit lea  allowing  the  manipulation  of  rules  In  EMI  CAT  (MI  4)  and  described  In  the 
next  paragraph,  constitute  a  powerful  and  well-adapted  tool  to  cope  with  rule  selection. 

3.2  HOW  TO  “TALK  ABOUT"  RULES 

The  importance  of  raeta-*know ledge  doesn't  have  to  be  proven  anymore  [PITKAT  82  j  ;  in  fact,  as  soon 
a9  an  expert  system  reaches  roughly  a  thousand  rules,  the  application  mechanisms,  regardless  of  the  asso¬ 
ciative  addressing  set  up,  remain  essentially  sequential  and  loose  their  efficiency. 

To  aid  in  determining  what  knowledge  is  useful  for  resolving  a  given  problem,  EMI  CAT  (MI  4)  offers 
five  possible  ways  of  referring  to  the  rules  present  In  the  base  : 

1)  organize  the  rule  in  a  hierarchical  form,  which  Is  achieved  Immediately  thanks  fo  the  object  repre¬ 
sentation  on  which  the  rules  are  constructed. 

2)  construct  one  or  more  index(es)  ;  the  construction  Is  automat  leal ly  carried  out  at  the  moment  when 
the  rule  is  entered  according  to  the  Instructions  of  an  attribute  specifying  : 

.  Che  index  name, 

.  the  pattern  to  be  used  as  a  key, 

.  the  pattern  search  mode  (total  unification,  filtering  In  the  direction  rule-pattern  or  In  the 
direction  pattern-rule). 

3)  refer  to  a  set  of  attributes  computed  when  the  rule  Is  entered  and  marking  the  constants  that  are 
specified  therein  (objects,  types,  attributes,  external  predicate)  allowing  meta-rules  companhle 
to  [DAVIS  80 J . 

4)  refer  to  attributes  entered  by  the  rule's  writer  (to  specify,  for  example,  the  cost  or  the  Impor¬ 
tance  of  the  rule). 

5)  unification  or  filtering  on  the  rule's  body  (external  form). 

Using  the  last  way,  any  Information  present  In  the  rule  i,s  accessible.  However,  for  the  suite  of 
efficiency  and  effectiveness  It  is  clear  that  Ir  should  preferably  be  used  in  conjunction  with  the 
other  ways  so  that  a  subset  of  pertinent  rules  can  be  rjpldly  selected. 

3.3  APPLICATION  OF  RULES 

The  main  objective  of  EMI CAT  (M14)  is  to  allow  defining  strategies  adapted  to  the  problen  to  be 
solved  ;  this  Is  made  possible  hy  a  unique  rule-application  primitive  described  In  the  next  paragraph, 
which  is  used  for  predefined  strategies  (*i  3.3.2)  as  well  as  user  strategies  ($  3.3.3). 

3.3.1  Application  Primitive 

The  application  primitive  Is  a  predicate  with  three  arguments  and  Is  written  as  follows  : 
apply  (rule-choice,  object-choice,  selected-object) 

Each  solution  corresponds  to  a  successful  instanciat ion  of  one  of  the  selected  rules.  The  diffe¬ 
rent  solutions  are  obtained  -  which  Is  always  the  case  in  PROLOG  -whenever  backtracking  occurs  on  the 
primitive.  The  three  arguments  have  the  following  meanings  : 

-  the  rule-choice  Is  made  either  hy  giving  the  list  of  rules  to  he  applied  or  hy  a  property 
(conjunction  of  PROLOG  goals)  that  should  be  verified  hy  them,  as  for  example  : 

R::  object  (R,  diagnosis)  4  value  (R,  cost,  low) 

allows  applying  all  the  rules  the  type  of  which  Is  ''diagnosis"  and  the  cos:  of  which  Is  "low", 

-  the  object-choice  argument  specifies,  at  the  time  of  application,  on  which  objects  the  rule  has 
to  he  applied.  Indeed,  It  Is  highly  advantageous  to  be  able  to  state  general  knowledge  In  the 
form  of  a  rule  (like  Ohm's  law),  but  to  apply  this  knowledge  to  the  only  objects  pertinent  to 
the  problem  to  be  solved  (and  not  as  In  the  example  of  Ohm’s  law  to  til  the  components  of  an 
electronic  circuits  !). 

Thus,  for  example  : 

Object  (R,  resistor)::  value  (R,  powe  r__aa  x ,  X  )  &  X  >  2 

will  limit  the  application  of  the  rule  to  resistors  the  power  max  of  which  Is  greater  than  2 
watts. 
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-  the  selected-object  argument  allows  communication  between  the  rule  and  the  application 

mechanism  ;  to  do  so,  the  rule's  writer  can  specify  with  a  predefined  predicate  (select)  a  terio 
in  the  rule  chat  will  be  unified  with  the  third  argument  of  the  application  primitive. 

Thus,  for  example,  to  "apply  rules  selected  by  meta-rules  ml  and  m2”,  It  will  suffice  to  write  : 

apply  (R::  apply  (ml. m2. nil,  nil, R), nil,*) 

provided  that  ineta-rules  ml  and  m2  encompass  a  term  such  a  ”select( ' rule  to  be  selected')". 

3.3.2  Predefined  Strategies 

EMICAT  (M14)  offers  a  few  predefined  strategies  built  thanks  to  the  primitive  "apply",  such  as  : 
Pass  :  evaluate  all  the  solutions 

Saturate  :  successively  evaluate  "pass"  until  no  object  Is  changed  any  longer  during  a  pas3 

Prove  :  apply  until  saturation  13  reached  or  until  a  goal  (conjunction  of  PROLOG  s°«»ls)  sup¬ 
plied  as  an  argument  Is  proven. 


3.3.3  User  Strategies 

It  Is  not  by  chance  or  omission  that  we  have  not  discussed  backward  chaining  up  to  now.  ^Irst  of 
all,  backward  chaining  muse  not  be  considered  as  a  mode  of  application  for  a  rule  (since  the  rule  can  only 
be  applied  rigorously  In  the  direction  condition  -  action)  but  rather  as  a  search  strategy.  On  the  other 
hand,  the  experience  chat  we  have  acquired  from  the  development  of  several  expert  systems  has  demonstrated 
to  us  that  It  was  simply  not  realistic  to  propose  a  "standard"  backward  chaining  ;  in  fact,  the  number  of 
parameters  to  cake  Into  account  Is  very  large  : 

-  should  Che  search  he  carried  out  In  depth-first  or  broad-first  strategy  ?  (or  a  mix  of  both)  ? 

-  should  all  the  objects  be  searched  for  ?  (for  some  It  often  nukes  no  sense). 

-  when  and  for  which  objects  should  the  operator  be  queried  ? 

This  Is  why  we  chink  that  It  Is  up  to  the  knowledge  engineer  to  defLne  the  hackward  search 
strategy,  tt  also  seems  to  us  that  EMICAT  (MI 4)  offers  a  large  amount  of  facilities  to  Implement  such  a 
strategy.  Thus,  for  example,  to  carry  out  : 

-  the  proof  of  goal  of  the  focn  ;  value  (X,Y,7.) 

-  In  depth-first  strategy 
without  user  querying 

it  suffices  : 

-  to  provide  for  the  generation  of  an  Index  (see  $  3.2)  of  the  rules  mentioning  the  term  set-val 
(X.Y.Z) 

-  to  attach  to  the  objects  for  which  backward  chaining  is  desired  the  procedural  attachment 
If-necded  with  Che  value  : 


pann  (08,  ATT,  Val)  A 

apply  (R : : lndex( set-val (Ob, ATT ,Val ) ,R )  ,  nl 1 , * ) 

and  that's  It  !  The  evaluation  of  a  goal  of  the  form  :  value  (X,Y,Z)  -  either  when  i  seirch  Is 
Initiated  or  when  a  rule  Is  evaluated  -  will  generate  a  search  by  the  application  of  rules  that  are  liable 
to  prove  the  target  when  It  Is  not  present  In  the  base  ;  the  ant  1- loi  pi ng  system  Integrated  with  the  object 
representation  prevents  che  possibility  of  a  potentially  Infinite  search. 

CHAPTER  4  :  IMPLEMENTATION 


The  environment  Ju9t  described  was  developed  on  an  IBM  30xx  with  the  language  VM/PK0LOC.  The  es¬ 
sentials  of  this  environment  reside  in  the  object  oriented  represent  at  loo  described  In  Chapter  2  ;  conside¬ 
rable  stress  was  placed  on  ensuring  good  response  times.  As  a  result,  the  value  of  an  attribute  Is  acce: -.ed 
In  roughly  100  microseconds.  Obviously,  If  the  object  representation  were  totally  Integrated  In  the  PROLOG 
Interpreter,  these  response  times  could  be  dramatically  Improved. 

And,  for  the  production  rules,  they  are  "compiled"  or,  to  he  more  precise,  "converted"  so  as  to 
introduce  as  efficiently  and  effectively  a3  possible  the  object -choice  mechanism  described  in  S  3.3.2.  It 
should  be  noted  that  the  “compiler”  can  be  redefined  by  a  knowledge  engineer  when  a  particular  need  war¬ 
rants  It. 
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CONCLUSION 


The  purpose  of  cue  KM l CAT  (MI  4)  environment  just  described  Is  to  use  the  incontest tble  advantages 
of  the  PROLOG  language  to  benefit  expert  system  programming. 

The  wore  salient  features  of  Kill  CAT  (Ml  4)  are  : 

-  object-oriented  language  features 

-  integration  to  PROLOG  environment 

-  easiness  for  programming  strategies  suited  to  various  ippl  teat  tons  (including  intelligent  back¬ 
tracking  and  meta-rules  writing  facilities) 

-  flexibility  for  defining  various  rule  formalisms 

Rut,  above  all,  KM t CAT  (’114)  is  in  industrial  product  tailored  to  ease  the  development  of  knowled¬ 
ge  based  applications.  For  that  purpose,  various  facilities  are  provided,  such  as  : 

-  integration  to  graphics 

-  trace  (at  various  levels) 

-  object  editing 

-  knowledge  base  archiving 

Since  the  beginning  of  1986,  KM I CAT  (Ml  4)  has  been  used  for  more  than  10  applications,  In  four  ma¬ 
jor  fields  : 

-  military  (batt lemanagement ,  avionics) 

-  space  (satellites  :  battery  management,  diagnostic) 

-  software  engineering  (quality  assurance,  rapid  prototyping) 

-  CAD /CAM  (Layout  verification,  diagnostic) 

•lost  are  expert  systems,  though  some  (a  fault  tree  generator  for  avionics,  rapid  prototyping)  use 
mainly  the  object-oriented  features  of  KM l CAT  (Ml  4)  for  knowledge  representation. 
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SUMMIT 

The  control  algorithm  for  complex  physical  plants  is  usually  based  on  a  model,  either  discrete  or  linear, 
which  describes  the  appropriate  response  to  data  obtained  from  sensors  located  throughout  the  plant. 
Models  of  plant  behaviour  are  usually  based  on  a  Markov  process  assumption  or  on  some  linear  system 
approximation.  Many  subtle  characteristics  beyond  the  range  of  the  assumptions  or  approximations  are 
either  Ignored  or  the  appropriate  response  Is  obtained  by  fine-tuning  after  the  control  system  is 
installed. 

Plant  representation  and  control  by  a  know ledge -based  system  is  an  attractive  alternative.  A  knowledge 
base  can  reflect  not  only  the  algorithmic  aspects  of  a  plant's  behaviour,  but  take  Into  account  many 
factors  which  are  difficult  or  impossible  to  describe  algorithmically.  In  addition,  such  systems  allow 
strategic  considerations  to  be  Incorporated  in  the  controller,  which  would  be  impossible  to  realize  In 
any  other  fashion.  Such  systems  are  being  implemented  in  growing  numbers. 

This  paper  presents  a  comprehensive  state-of -the  art  summary  of  the  status,  progress,  issues  and 
directions  In  the  use  of  knowledge-based  systems  in  real-time  control  applications.  It  includes  a 
bibliography  of  current  work,  up  to  January  1987. 


0.0  A  Perspective  on  Control  Systems 

The  description  of  a  physical  plant  for  the  purposes  of  computer  control  is  often  Implemented  as  a 
Markov  process  represented  by  a  finite-state  machine  or  by  an  equivalent  algorithmic  representation  of 
the  control  states  and  the  transition  requirements.  In  a  purely  sequential  control  situation,  the  design 
is  relatively  simple  in  that  the  correct  procedure  is  instituted  according  to  a  preset  time  standard  or  in 
response  to  anticipated  events  during  operation.  As  the  topology  of  the  control  algorithm  becomes  more 
complex,  the  representation  and  execution  constraints  become  increasingly  difficult  to  implement. 

In  the  situation  where  many  events  can  occur  asynchronously  and  where  each  must  be  attended  to  in 
some  fixed  period  of  time,  the  controller  design  becomes  even  more  constrained.  The  designer  must 
guarantee  adequate  responses  within  the  specified  time  Interval  for  the  worst  case.  Often  the  anticipated 
performance  is  dependent  on  fast  hardware,  although  good  algorithms  are  of  considerable  assistance.  The 
designer's  job  is  to  obtain  a  sufficiently  good  representation  of  the  plant  dynamics,  and  to  Insure  a 
response  to  given  excitations  in  the  predetermined  time  by  the  appropriate  choice  of  fast  hardware  and 
software,  based  on  the  coat  constraint.  Most  plants  also  have  a  human  operator  in  the  control  loop. 

The  basic  task  the  Operator  is  to  maximize  the  cost -ef fectl venesa  of  the  production  process  while 
minimizing  the  likelihood  of  damage  to  the  plant  and  personnel  in  the  event  of  component  failures  and/or 
other  events  not  included  in  the  control  algorithm.  The  operators  must,  therefore,  attempt  both  tactical 
and  strategic  control,  depending  on  the  complexity  of  the  control  system  design.  The  functions  of  the 
controller  and  the  instrumentation  system  are  the  following: 

Tactical ; 

-  To  reduce  the  need  for  operator  intervention  by  au\  nmat ically  controlling  the  plant  (i.e.,  to 
implement  tactics). 

-  To  reduce  the  risk  of  damage  to  plant  and  personnel  by  automatically  shutting  down  part  or 
all  of  the  plant  when  process  variables  move  out  of  their  normal  operating  ranges  (i.e.,  failure  and/or 
disaster  containment). 

Strategic ; 

-  To  provide  up-to-date  information  to  enable  optimum  control  strategies  to  be  Implemented  by 
the  operators. 

The  implementation  of  an  appropriate  strategic  response  to  an  emerging  situation  depends  on  the 
experience  of  the  operator  and  on  the  ability  to  recognize  and  respond  appropriately.  In  addition,  the 
current  cost /performance  and  flexibility  provided  by  process -control  computers  means  that  it  is  possible 
to  present  to  the  operators  a  large  quantity  of  information.  The  operator,  In  such  situations,  must 
respond  to  this  Information  and  must  often  make  complex  strategic  decisions.  As  a  result,  when  things 
start  going  wrong,  accompanied  usually  be  a  sudden  proliferation  of  alarm  information,  both  the  operator's 
ability  to  respond  appropriately  is  stressed  resulting  in  errors  of  judgment,  and  response  time  limits  are 
often  exceeded.  This  phenomenon  is  known  as  'cognitive  overload'. 

There  is,  therefore,  a  need,  in  many  applications,  for  systems  capable  of  reducing  the  cognitive 
load  on  operators  by  focusing  on  underlying  plant  problems  and  automat4 cal ly  Implementing  correct  tactical 
and  strategic  functions.  In  extreme  cases,  there  is  a  need  for  ellmlntting  the  human  operator  altogether. 
These  requirements  suggest  the  use  of  know  ledge -based  software  (often  called  an  expert  system). 

The  representation  of  a  plant  by  knowledge -baaed  software  is  appealing  from  several  points  of  view. 
Often  the  plant  haa  many  features,  which  are  difficult  to  model  by  ordinary  means,  and  such  features  are 
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often  easy  to  state  as  rules.  The  representation  of  a  plant  by  a  knowledge  base  is  a  simulation  of  the 
plant,  which  can  be  based  on  compiled  knowledge,  as  well  as  on  heuristics  obtained  from  obseived 
behaviour.  These  are  often  easier  to  represent  by  rules,  based  on  knowledge,  than  by  attempts  to  model  it 
mathematically.  A  knowledge-based  representation  maintains  all  the  attributes  of  extensibility, 
transparency  and  simplicity  normally  obtained  from  these  systems. 

In  addition,  strategic  approaches  to  control  can  be  .'nstituted  easier  than  In  classical  approaches. 
Smart  controllers  are  possible,  therefore,  not  only  In  a  tactical  but  In  a  strategic  sense  as  well.  Thus, 
complex  inferenclng  about  control  options  can  be  instituted  for  such  considerations  as  failure 
containment,  emergency  response  tactics,  and  responses  to  developing  pathologies.  In  addition,  the 
operator’s  tactical  and  strategic  role  can  be  reduced  (thus  reducing  the  stress  level)  and/or  eliminated. 

Finally,  it  is  often  possible  to  get  a  working  system  with  a  higher  performance-cost  ratio  than  by 
classical  means.  There  are,  however,  problems  in  both  the  design  and  implementation  of  this  approach: 
primarily  in  insuring  a  good  representation  of  the  plant  dynamics  that  is  executable  within  the  time 
constraints. 

This  paper  provides  a  state-of-the-art  look  at  progress  in  the  utilization  of  expert  systems 
technology  in  the  design  and  control  of  real-time  expert  systems.  It  provides  a  report  on  the  published 
work  in  the  field,  as  well  as  who  is  working  in  the  area.  It  discusses  the  design  of  real-time  expert 
systems,  the  problems  involved  In  developing  them,  and  the  approaches  taken  to  overcome  the  obstacles.  It 
thus  serves  as  a  first  point  of  reference  for  anyone  considering  work  in  the  field. 

1.0  imOMJCTIOW 

The  descriptive  phrase  "a  real-time  system”  is  used  widely  by  various  design  teams  to  describe  very 
different  performance  attributes.  On  the  lower  side,  ’real  -time’  is  often  used  to  mean  ’fast’,  in  some 
vague  sense,  either  relative  to  an  external  environment  or  in  terms  of  computing  resources  consumed  to 
produce  the  response.  For  our  purposes,  a  real-time  response  forms  part  of  the  design  requirements  and  is 
a  constraint  which  must  be  met  before  acceptance.  Regardless  of  the  algorithm,  the  system  must  guarantee  a 
response  to  a  given  external  stimulus  in  a  given  time  (most  often,  the  results  of  not  meeting  the  time 
constraint  is  catastrophic  rather  than  merely  inconvenient).  The  set  of  stimuli,  and  the  assorted  set  of 
responses  form  the  real-time  constraints  on  the  design. 

More  formally,  given  a  set  of  inputs  §St  and  associated  set  of  responses  §Rt,  and  the  associated 
response  time  intervals  §Tt,  the  designer  must  guarantee  that  after  an  input  Si,  the  elapsed  time  T  before 
a  suitable  response  is  generated  is  such  that  T  is  less  than  Tl. 

In  some  situations,  the  quality  of  the  response  will  improve  given  more  computational  time.  In  such 
situations,  an  adequate  response  may  be  computable  within  the  given  Ti,  buc  not  necessarily  the  optimum.  A 
carefully  defined  adequate  solution  may  form  part  of  the  design  requirements.  The  designer's  problem,  In 
this  case  Is,  to  organize  the  knowledge  base  and  inferenclng  algorithm  so  that  the  quality  of  the  solution 
improves  monotonical ly  with  the  search  time  and  so  that  the  solution  found  in  Tl  Is  always  acceptable. 

The  representation  of  the  control  characteristics  of  a  plant  can  be  undertaken  by  the  functional 
partition  of  classical  expert  system  software  i.e.,  a  rule  base  and  an  Inference  algorithm.  The  Input 
excitation  from  the  plant  is  intercepted  by  the  Inference  algorithm  and  the  search  for  a  suitable  output 
excitation  involves  finding  the  consequence  of  the  appropriate  rule.  The  problem  has  many  facets:  the  most 
obvious  being  to  guarantee  the  response  time  (i.e.,  the  search  time  of  the  knowledge  base)  based  on  the 
specified  constraints.  The  response  required  of  such  systems  could  either  be  the  best,  within  the  time 
limits  Imposed,  or  the  optimum  obtainable,  within  the  same  limits.  Each  requirement  poses  special  design 
problems . 

In  most  applications,  in  order  to  achieve  the  benefits  of  this  technology,  the  knowledge  base  is 
large  and  complex,  and  the  inferenclng  techniques  are,  therefore,  subject  to  combinatori al  explosion 
problems  (the  search  tree  growing  exponentially),  and  sometimes  a  version  of  halting  problem,  in  which  the 
search  is  not  guaranteed  to  terminate  (28).  Several  approaches  to  speeding  up  the  search  have  been 
proposed  (these  are,  of  course,  applicable  to  regular  expert  systems),  which  Involve  compacting  the 
knowledge  base  and  partitioning  It  so  that  only  the  most  probable  partition  is  searched. 

Implementation  of  the  appropriate  compacting  and  partitioning  apnroaches  would  reduce  the  execution 
time  and  possibly  allow  implementation  of  a  real-time  response:  however,  'fast'  is  not  necessarily  real¬ 
time,  and  many  additional  techniques  are  usually  adopted  to  guarantee  appropriate  response  times. 

Finally,  knowledge-based  systems  can  be  designed  and  implemented  to  respond  to  input  data  which  Is 
incomplete  and/or  uncertain,  by  utilizing  reasoning  processes  that  acknowledge  uncertainties.  Reasoning 
with  uncertain  data  is  an  attribute  that  is  relatively  easy  to  Implement  using  a  knowledge  based  system. 

This  paper  discusses  how  these  approaches  have  been  applied.  It  reviews  real-time  expert  systems 
implemented  to  date,  as  well  as  the  problems  that  have  been  encounL  red  in  developing  these  systems,  the 
design  approaches  that  were  used  to  overcome  the  problems  and  the  further  Issues  that  need  to  be  resolved 
before  these  systems  may  be  widely  used. 

Section  2  provides  a  discussion  in  more  detail  of  the  requirements  for  real-time  systems  that  apply 
generally,  regardless  of  the  implementation. 

Section  3  is  a  suoraary  of  the  features  of  several  systems,  which  illustrates  both  some  typical 
applications  and  the  various  approaches  used  during  Implementation. 

Section  4  reviews  the  approaches,  which  have  been  published  to  date,  aimed  at  addressing  the  issues 
and  for  solving  the  problems. 
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Section  5  is  a  perspective  of  the  major  problems  that  have  yet  to  be  solved  before 
use  of  this  approach  will  be  viable. 


che  wide-spread 


2.0  REAL-TIME  RZQ0I1EMKMTS 

A  number  of  issues  beyond  those  usually  considered  in  classical  expert  systems  design  must  be 
addressed  before  choosing  such  systems  for  real-time  problems. 

Obviously,  in  order  to  guarantee  the  real-time  constraints,  the  system  must  provide  the  response  to 

changes  in  the  environment  at  or  before  the  time  it  is  needed.  Achieving  the  design  specifications 
requires,  as  usual,  a  judicious  allocation  of  the  response-time  budget  among  the  lnstru-ientation,  the 

processing  hardware  and  the  software.  The  software  is  our  main  concern  here,  and  this  software  can  be  a 

hybrid  of  classical  (i.e.,  algorithmic)  and  knowledge  based  modules.  The  design  of  the  algorithmic 
software  follows  all  the  rules,  which  are  now  well  understood.  The  knowledge -based  portion  of  the  software 
is  the  novel  part  and  is  of  the  most  interest  in  this  paper.  The  obvious  first  approach  is  to  reduce  the 
size  and  complexity  of  the  knowledge  base  and  to  find  high-speed  Inference  procedures  to  search  for 
responses.  This  may  not  be  easy,  or  even  possible,  since  large  and  complex  representations  and  inferencing 
procedures  may  have  motivated  the  use  of  this  technology  in  the  first  place. 

The  results  of  the  designer's  efforts  may  be  thought  of  in  three  catagories:  representation, 
functional  allocation  and  performance: 


Representation:  Representation  is  thought  of  as  encompassing  both  the  logical  representation  of  the  plant 
dynamics  and  its  operational  requirements  (both  tactical  and  strategic)  and  the  implied  inferencing 
procedures.  The  representaion  used  has  been  either  rule-based  and/or  frame-based  systems. 

Inferencing  procedures  are  often  the  most  difficult  to  model  and  to  implement.  Both  forward  and 
backward  chaining  are  used  as  are  many  variations  of  hypothesis  testing  and  truth  maintenance. 

Functional  Allocation:  The  allocation  of  functions  between  hardware  and  software  is  dependent  on  the 
performance/cost  ratio  that  must  be  achieved. 

The  first  major  decision  with  respect  to  software  is  the  allocation  of  functions  between  classical 
algorithms  and  the  knowledge -based  software.  Normally,  the  operational  attributes  allocated  to  the 
knowledge-bases  should  be  those  that  are  difficult  to  represent  by  algorithms,  both  in  the  representation 
of  the  plant  dynamics  (i.e.,  tactics)  and  those  used  to  implement  strategic  operations  or  responses  based 
on  experience  and/or  heuristics. 

It  is  a  truism,  perhaps,  that  each  functional  part  of  the  controller  should  be  allocated  to  the 
mechanism  that  moat  cost-effectively  implements  the  requirements.  This  implies  that  a  good  design 
methodology  is  available  to  expose  the  functions  and  to  partition  the  design  so  that  a  proper  allocation 
can  be  found  from  the  alternatives.  This  is  a  separate  topic  for  discussion,  which  is  beyond  our  scope. 

Performance:  Achieving  real-time  performance  within  the  cost  constraints  is  the  bottom  line  from  the 
designer's  point  of  view.  It  involves  both  achieving  a  good  representation  and  an  appropriate  functional 
allocation.  In  addition,  it  almost  always  involves  choosing  fast  hardware  as  execution  vehicles.  The 
first  and  most  important  step  is  to  create  a  functional  architecture  that  allows  optimum  decisions  to  made 
with  respect  to  the  partition  and  allocation  to  implementation  hardware.  This  implies  that  the 
sof tware/hardware  boundary  can  be  chosen  with  equally  well. 


Given  that  a  good  functional  architecture  has  been  chosen,  the  task  can  be  considered  In  two  parts: 
first,  the  Intrinsic  response  obtainable  from  the  software  and  second  the  speed  of  the  hardware  portions. 
It  may  take  many  design  iterations  to  find  an  optimal  solutions  as  well  as  testing  and  tuning  during  the 
field  trials. 

Parallel  processing  becomes  an  important  consideration  with  the  implied  requirement  that  tasks  can 
partitioned  and  allocated  to  take  advantage  of  the  inherent  concurrency.  Once  again  we  are  back  to  the 
need  for  a  good  design  methodology. 

3.0  Application  Exa^>les  and  Approaches 

In  order  to  illustrate  the  benefits  from  an  expert  systems  approach,  it  is  useful  to  evaluate  the 
problem  domains  or  areas  that  have  already  been  tried,  and  the  level  of  success  of  the  systems  built  to 
date.  This  section  is  divided  into  two  parts:  Section  3.1  outlines  a  geniric  overview  of  some  problem 
areas  that  have  benefited  from  implementing  real-time  expert  systems;  Section  3.2  contains  an  extensive 
discussion  of  systems  that  have  been  reported  in  the  literature  as  either  working  or  in  progress. 

3.1  Domain  Areas: 

The  following  represent  some  of  the  generic  applications  reported  in  the  literature.  They  illustrate 
a  grouping  of  the  various  domains  and  illustrate  some  of  the  specific  tasks  allocated  to  these  systems. 

INDUSTRIAL 


l)  Process  Control 


a)  Process  upset,  i.e.  handling  of  the  alarms. 

b)  Diagnosis  of  inconsistent  Information  (for  example,  critical  measurements  that  do 
not  result  in  sn  alarm). 

c)  Strategic  economic  optimization. 

d)  Provide  strategic  advice  to  the  operators  to  help  them  handle  and  avoid  crises. 
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2)  Maintenance  Tasks: 


Aaslst  the  smooth  running  of  the  plant  by  providing  a  quick  diagnosis  of  the  fault  and  recommending  a 
quick  repair  or  advising  on  the  most  suitable  action.  These  expert  systems  are  best  regarded  as  an  advance 
In  the  automation  of  the  factory  They  perform  the  following  tasks: 

a)  Alarm  monitoring  [ES  for  maintenance  tasks]. 

b)  Fault  diagnosis. 

c)  Test  generation. 

d)  Automatic  plan  rescheduling. 

e)  Sequencing  of  repair  action. 

.)  Management  of  the  scheduling  and  long  term  planning  of  the  plant's  operation. 

h)  The  entirety  of  the  plant  may  also  be  kept  in  perspective,  so  that  che  propagation 
of  faults  throughout  a  plant  may  be  detected. 

3)  Computer  Operations  Environment: 


A  continuous  real-time  expert  system  for  computer  operations. 


a)  Controlling  the  computing  system. 

b)  Provide  real-time  advice  for  the  operators. 

1)  Scheduling  large  batch  of  jobs. 

2)  Detect  and  suggest  correction  for  hardware  errors. 

3)  Performance  monitoring. 

4)  Background  monitoring  (to  verify  all  parts  of  the  environment  are  operational). 

MILITARY 


a)  Autonomous  satellite  that  participates  In  early  warning  missile  tracking  and  counter 
measurements. 

b)  Satellite  self  defense  activities. 

c)  Nuclear  power  plants. 

d)  Smart  weapon  systems. 


MEDICINE: 


Intensive  care  patient  Monitoring 


COMMUNICATIONS:  Mesaage  Interpreter  (for  example,  for  ships  and  airplanes). 


3.2  Example  Systems: 

The  following  examples  provides  a  description  of  several  real-time  expert  systems  that  are  either  In 
routine  use,  in  field  testing,  or  in  a  development  environment.  The  goal  Is  to  provide  a  comprehensive 
view  of  the  variety  of  systems  and  where  posible  the  approaches  used  In  resolving  the  various  issues  laced 
by  the  designers. 

HKXSCOW:  An  Expert  System  for  Real-Time  Control  [26] 

Problem  Domain:  Hexscon  was  developed  for  military  applications  which  demanded  high  degree  of 
sophist  teat  ion  with  strict  constraints. 


Design  Goals: 

1)  Accommodate  5000  rules  In  a  microcomputer  system  with  512  k  memory. 

2)  Response  time  of  10  ms  to  100  ms. 

3)  Ability  to  handle  many  objectives  (about  1000) 

4)  Ability  to  function  with  uncertain  data. 

Architecture:  Uses  both  conventional  Logic  and  knowledge  based  techniques,  to  preserve  adequate  and  rapid 

operational  decision  making. 


The  problems  that  arose  from  this  approach  was  the  need  for  compatible  knowledge  representations  in 
the  two  parts.  Therefore,  to  make  a  completely  integrated  hybrid  system,  knowledge  and  data 
representations  for  both  conventional  and  knowledge-based  parts  would  have  to  be  Identical  or  at  least 
fully  compatible.  The  solution  was  to  use  a  representation  translator.  Th's  allows  the  conventional  and 
knowledge-based  parts  to  exchange  Information  freely  without  requiring  full  representational 
compatibility . 


Knowledge  Representation  and  Inferenclng:  Real-time  systems  are  usually  partitioned  into  highly  modular 
tasks,  communicating  under  control  of  a  real-time  operating  system.  However,  It  proved  difficult  to 
Implement  the  knowledge-based  part  of  the  system  by  partitioning  it  into  highly  modular  tasks  due  to  the 
fol  lowing  reasons: 

-  Forward  applications  of  conventional  real-time  techniques  were  extremely  expensive  in  scarce 
memory  resources. 


-  A  sophisticated  partitioning  of  the  inference  engine  Introduced  problems 
efficient  knowledge  representations  that  had  been  developed  in  stand-aione 
systems . 


in  implementing 
knowledge  based 


The  solution  was  to  let  the  knowledge  based  portion  run  as  a  single  task  In  the  real-time  system  using  a 
forward  chaining  (data  driven)  Inference  engine.  Production  rules  are  used  for  representing  the  heuristic 
knowledge  of  the  problem  domain. 

Language:  At  the  beginning  of  the  project  LISP  was  chosen  but  It  waa  abandoned  since  LISP  languages  for 
microcomputers  tend  to  be  memory  Intensive  and  execute  significantly  slower  than  other 
microcomputer  languages. 

Pascal  was  then  chosen  because  it  simplified  construction  of  large  programs,  produced  compact,  last 
code  in  the  target  environaent ,  and  it  could  be  easily  converted  to  Ada. 

Status:  A  prototype  real-time  knowledge-based  system  was  developed  on  a  microcomputer. 

Performance:  The  response  time  varies  from  0. 10s  to  30s  depending  on  the  computer,  and  the  number  of  rules 
used  in  the  knowledge  base.  The  response  time  was  0.25-0.5  s  with  the  emphasis  on  maximum  speed,  and  1  to 
10  s  with  the  emphasis  on  maximum  expertise. 

Assessment :  Although  the  system  does  not  achieve  the  ultimate  goal  for  the  response  time  (10  to  100  ms) 
for  most  cases,  It  shows  that  a  knowledge  based  controller  could  be  built  that  runs  on  a  microcomputer  and 
has  enough  sophistication  and  capability  to  be  effective  for  some  real  world  problems  such  as  military 
applications.  It  also  shows  the  state  of  the  art  in  predicting  expert  systems  performance. 


ESCORT:  An  Expert  System  for  Complex  Operation*  in  Real-Time  [24] 

Problem  Domain:  Escort's  knowledge  covers  instrumentation  failures  and  some  operator  errors.  PLant 
failures,  such  as  pipe  rupturing,  were  excluded  because  of  the  relative  rarity  of  such  problems. 

Design  Goals:  The  design  of  ESCORT  was  influenced  by  the  following  factors: 

1)  The  system  must  provide  advice  on  plant  crises  within  1  second,  (a  requirement  typical  of 
conventional  process  control  systems) 

2)  This  advice  must  both  Indicate  the  cause  of  an  alarm  and  the  Importance  of  the  underlying 
problem  relative  to  other  existing  problems. 

3)  The  system  should  provide  advice  on  control  and  instrumentation  problems  but  not  plant 
failures. 

4)  The  operator  must  always  remain  in  control  of  the  system;  not  the  other  way  around. 

5)  The  delivery  system  should  be  capable  of  installation  without  modification  to  the  target  plant. 

6)  There  must  be  a  net  benefit  to  the  operator  of  using,  rather  than  ignoring  Escort. 

Architecture:  Escort  has  two  user  interfaces,  the  first  provides  continuous  advice  on  plant  status  to  the 
operator;  the  second  enables  enhancements  to  be  made  to  the  knowledge  base. 

The  user  interface  was  considered  to  be  critical  In  the  design  because  of  the  following  reasons: 

1)  It  would  be  a  major  factor  in  the  usability  of  the  system 

2)  Its  Impact  on  the  Escort  *s  knowledge  and  reasoning  approach. 

These  resulted  in  the  following  requirements: 

1)  Advice  on  the  problem  causing  alarm 

2)  Explanation  of  the  basis  for  advice 

3)  Indicate  the  relative  importance  of  the  alarms 

4)  Indicate  the  likely  affect  of  not  dealing  with  the  problem 

5)  The  operator  should  always  have  control  over  which  advice  he  is  given. 

The  following  are  the  tasks  that  Escort  needs  to  perform: 

1)  Recognizing  occurrences  or  events  In  the  processing  plant  which  may  Indicate  some  plant 
problem  or  operator  error. 

2)  Prioritising  these  events. 

3)  Analyzing  an  event  to  infer  the  underlying  plant  or  instrument  problem  or  operator  error 

4)  Prioritizing  the  underlying  problems 

5)  Presenting  problem  diagnoses  to  the  operator 

6)  Responding  to  operators  request. 

Of  these,  all  but  the  last  two  use  knowledge-baaed  approaches- 
Knowledge  Representation  and  Inferencing: 

Time  critical  systems  require  more  sophisticated  ways  of  determining  reasoning  strategy  than  using 
explicit  representation  of  domain  knowledge.  This  is  due  to  the  fact  that  they  have  to  cope  with  widely 
varying  computational  loads,  deal  with  multiple  events  in  parallel,  and  respond  quickly  to  events. 

Escort,  therefore,  uses  a  knowledge  based  scheduler.  It  provides  the  flexibility  to  allocate 
resources  depending  on  the  current  state  of  Its  problem  solving  and  of  the  plant.  The  knowledge-based 
scheduler  is  able  to  take  account  of  the  plant  state,  the  diagnoses  made  and  any  operator  requests  in 
determining  which  activity  to  perform  next. 
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The  scheduler  Is  responsible  for  ensuring  that  the  Individual  tasks  and  In  particular  the  diagnosis 
task  are  performed  efficiently.  For  the  knowledge-based  tasks,  this  Is  essentially  a  search  problem  in 
which  a  solution  is  obtained  by  examining  and  applying  as  few  rules  3s  possible.  Rules  applicable  at 
similar  instances  or  at  similar  stages  in  the  diagnosis  task  are  therefore  grouped  together  into  rule  sets 
so  that,  at  any  stage  In  the  problem  solving,  only  potentially  relevant  rules  are  examined.  This  has  meant 
that  typically  20Z  of  the  rules  are  activated  in  diagnosing  a  particular  problem. 

Assessment:  The  system  is  capable  of  reducing  the  cognitive  load  on  a  plant  operator.  However,  there  Is  no 
mention  of  the  systems  response  time  in  this  paper. 

Future  Work:  The  recent  work  has  concentrated  on  making  Escort's  diagnostic  reasoning  more  flexible. 
Escort  will  be  able  to  follow  the  cause  and  effect  pathway  from  the  original  problem  to  Its  manifestation 
elsewhere  in  the  plant  using  the  knowledge-based  search  strategy.  The  new  approach  will  also  enable  Escort 
to  reason  over  time  rather  than  just  within  time. 

YKS/MVS:  A  Continuous  Real-Time  Expert  System  for  Computer  Operations  [22) 

Problem  Domain:  The  requirement  for  high  availability  and  performance  in  large  computing  installations  has 
increased  the  need  for  fast  and  consistent  responses  to  operational  problems.  Therefore,  automatic  aids 
for  computer  operators  are  needed. 

YES/MVS  is  an  experimental  facility  deve’oped  to  aid  in  the  real-time  operation  of  a  large  multiple 
virtual  atorage/systeo  Product-Job  Entry  Subsystem  3  (MVS/SPJES  3)  computing  Installation*  Tc  addresses 
both  routine  actions  taken  in  operating  the  target  system  and  spontaneous  problems  that  would  normally  be 
handled  by  an  operator. 


Design  Coals:  The  problems  addressed  Include: 

1)  Various  kinds  of  MVS-detected  hardware  errors. 

2)  JES  queue  space  depletion. 

3)  Channel  to  channel  link  problems. 

4)  Subsystem  abnormal  ends. 

5)  Performance  monitoring, 
b)  Background  monitoring. 

Problems  detected  and  positive  corrective  actions  are  displayed  for  the  operator. 

The  following  benefits  were  anticipated: 

1)  Better  management  of  the  different  processes  which  are  running  asynchronously  as  part  of 
YES /MVS. 

1)  Relieving  the  expert  system  from  low  level  Input /output  conslderat ions  such  as  message  and 
display  screen  formatting. 

3)  Providing  a  self  contained  knowledge  base,  so  that  operational  policy  description  can  be  more 
easily  read  and  modified. 

Architecture:  YES/MVS  runs  on  a  separate  computer  and  does  not  depend  upon  the  target  system  for  computing 
time  and  other  resources  in  order  to  be  able  to  handle  major  Incidents  in  the  target  system.  Its  interface 
to  MVS  is  through  an  emulated  JES  3  console,  appearing  to  MVS  as  a  normal  operator's  console.  YES/MVS  runs 
In  three  concurrently  running  virtual  machines  under  VM/SP  operating  system: 

1)  The  expert  virtual  machine. 

2)  The  MVS  communications  control  facility  virtual  machine. 

3)  The  display  control  virtual  machine. 

The  expert  virtual  machine:  Using  the  expertise  from  multiple  subdomains  together  has  several  advantages 
over  creating  a  separate  expert  for  each  subdomain  in  its  own  virtual  machine.  Since  rules  in  a  given 
subdomain  may  use  some  of  the  same  status  information  that  Is  needed  by  the  rules  in  another  subdomain. 
One  global  model  of  the  target  system  is  kept  in  working  memory.  This  eliminates  redundencies  and,  hence, 
inconsistency  across  subdomains  In  the  expert  system’s  model  of  the  target  system. 

The  MVS  communications  control  facility  virtual  machine:  It  runs  the  MVS  communications  control 
facilities.  This  virtual  machine  frees  the  knowledge  engineer  from  concerns  about  parsing  messages  and 
extracting  Internal  character  string. 


The  display  control  virtual  machine:  It  controls  the  display  facilities  and  all  interactions  between 
YES/MVS  and  the  systems  operators.  The  actual  implementation  of  display  facilities  was  carried  out  through 
the  use  of  an  OPS 5  rule  base,  combined  with  calls  to  the  IBM  Graphical  Data  Display  Manager. 


Knowledge  Base  and  Inferenclng:  The  knowledge  base  is  a  high  level,  declarative  format  of  production- 
rules.  Since  the  knowledge  base  is  Inherently  modular.  It  is  easier  for  it  to  adapt  and  evolve  with  a 
procedural  encoding  of  the  knowledge. 

Language:  OPS  S  was  selected  as  a  vehicle  for  implementing  YES/MVS  due  to  its  several  advantages  for  the 
pro  jert . 


1)  It  Is  flexible  and  modifiable 

2)  It  could  be  converted  to  run  under  LISP/VM  on  an  IBM  computer 

1)  Its  use  of  production  rules  as  a  knowledge  base  representation  seemed  naturally  suited  to  the 
type  of  knowledge  occurring  in  the  domain  of  computer  operations. 

A)  Its  data  driven  form  of  inference  was  particularly  appropriate  to  the  situation  of  responding 
in  real-time  to  Information  received  from  the  target  MVS  system. 
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However,  significant  extensions  were  made  to  0PS5  to  enable  It  to  be  used  in  a  real-time  application. 
The  expertise  in  YES/MVS  on  system  operations  is  encoded  in  an  extended  version  of  0PS5,  which  runs  within 
the  LISP/VM  environment. 

The  Requirements  for  Real-time  Control:  The  MVS  system  being  monitored  and  controlled  by  YES/MVS  is  highly 
dynamic.  Since  the  MVS  world  is  highly  nonomonotonic,  it  is  impossible  to  maintain  an  accurate  model  of 
MVS  that  is  complete  in  all  detail.  Instead,  a  model  that  provides  a  reasonably  good  description  of  the 
status  of  MVS,  from  the  view  point  of  operations  is  maintained.  The  various  problems  discussed  earlier 
were  addressed  as  follows: 

Problem:  Real-time  response. 

I'Olutlon:  The  speed  of  execution  of  0PS5  was  Improved  by  compiling  the  right  hand  side  of  the  rule  (such  a 
compilation  has  been  independently  introduced  in  0PS83).  The  matching  process  has  been  tuned  with  several 
LISP  macros.  Also  the  rules  were  distributed  between  several  0PS5  systems  using  concurrent  processes  in 
the  form  of  separate  virtual  machines  supported  by  a  host  computer. 

Problem:  Being  able  to  initiate  an  action  at  a  given  time  is  one  of  the  fundamental  requirements  of  a 
real-time  control  problem.  With  a  data-driven  inference  engine,  this  includes  the  production  of  working 
memory  elements  at  some  future  time. 

Solution:  This  was  accomplished  by  defining  a  new  right  hand  side  action  primitive  for  delayed  production. 
TIMED-MAKE,  which  takes  the  normal  0PS5  MAKE  arguments  followed  by  either  an  absolute  or  relative  time 
specification. 

Problem:  The  ability  to  have  distributed  processes  Interact  in  a  timely  fashion. 

Solution:  Fast  communication  is  achieved  by  introducing  a  new  communication  phase  in  the  normal  0PS5 
inference  cycle  (recognize,  conflict  resolution,  act).  During  the  communication  phase,  external  messages 
are  picked  up  and  outbound  messages  are  sent.  The  conflict  resolution  then  takes  place  based  on  changes  to 
working  memory  as  the  result  of  both  right  hand  side  actions  and  incoming  messages. 

Problem:  Need  for  explicit  control.  For  example,  there  are  critical  problems  that  require  a  command 
sequence  to  be  Issued  to  MVS  without  other  queries  or  commands  being  interspersed.  Hardware  error  message 
handing  is  one  such  case.  Such  a  real-time  requirement  necessitates  explicit  control  over  the  rule  firing 
in  the  inference  engine. 

Solution:  The  two  modes  of  0PS5  conflict  resolution,  LEX  and  MEA,  were  extended  by  i  Priority  Mode  which 
lias  precedence  over  these.  The  conflict  resolution  of  0PS5  is  modified  so  that  the  active  conflict  set  is 
temporarily  reduced  by  excluding  all  active  rules  that  do  not  have  the  highest  priority  task  among  set. 
Then  the  normal  0PS5  conflict  resolution  acts  on  the  reduced  set. 


The  priority  mechanism  effectively  satisfies  the  real-time  control  needs.  It  als<  allows  control  over 
rule  interaction  between  different  subdomain  areas.  While  meta-rules  could  have  been  used  to  refine  the 
conflict  resolution  strategy,  it  was  found  that  the  priority  control  mechanism  ottered  an  equivalent 
capability  without  incurring  the  overhead  and  complexity  of  such  a  facility.  Furthermore,  it  provides  a 
rule-grouping  paradigm  similar  to  the  use  of  contexts  in  EMYCLN  and  rule-groups  for  HH  rules  in  EXPERT. 


Requirements  for  continuous  operation:  There  are  at  least  three  basic  requirements  for  operating  in  a 
continuous  mode: 


1)  The  inference  engine  should  not  terminate  when  no  rule  is  eligible  to  fire. 

2)  The  system  should  ideally  run  on  a  special-purpose,  hlgh-avallablllty  computer,  different 
from  the  subject  machine.  If  the  host  computer  or  the  virtual  machines  comprising  the  system  go 
down,  the  system  must  be  restarted. 

3)  Working  memory  elements  that  have  served  their  purposes  must  be  removed.  The  accumulation  of 
old  useless  data  in  the  working  memory  not  only  creates  memory  space  problems  in  continuous 
operation, but ,  of  more  importance,  instantiates  the  wrong  productions  In  a  data  driven 
inference  engine,  such  as  0PS5. 

In  order  to  overcome  these  problems  the  following  steps  were  taken: 

1)  An  0PS5  rule  OPSWAIT  was  implemented,  which  puts  the  system  into  a  waiting  mode.  Any  external 
messages  causes  the  system  to  resume,  with  the  new  data  added  to  the  working  memory. 

2)  An  automatic  restart  procedure  is  called  during  the  host  computer  initial  program  load  and  also 
when  a  down  machine  is  detected  during  a  periodic  mutual  polling  among  virtual  machines  of  the 
system. 

3)  Many  different  "garbage  collection"  techniques  have  been  used  t  i  remove  old  data. 


Language:  OPS 5 

Status:  YES/MVS  ran  regularly  at  the  Yorktown  Computing  Center  during  a  period  of  over  nine  months.  After 
considerable  effort,  it  ran  fully  authorized,  taking  action  automatically  and  subsequently  notifying  the 
operator • 


Assessment:  The  system  certinly  worked  as  designed,  however  it  is  interesting  to  observe  the  continuous 
increases  in  epu  memory  being  used  by  the  monitor.  The  cost /perf ormacne  is  certainly  something  tht  will 
have  to  be  looked  at  from  several  points  of  view. 


Future  Work:  A  second  version  of  YES/MVS  is  being  developed  by  the  Expert  Systems  for  System  Management 
Group.  This  second  version  wll’  ^e  Installed  at  several  large  IBM  computing  centers.  It  will  contain 
software  to  address  problems  that  are  Sufficiently  uniform  that  generally  applicable  knowledge  can  be 
used  to  control  diagnosis  and  corrective  actions.  It  will  also  emphasize  software  constructs  that  support 
the  natural  statement  and  direct  implementation  of  knowledge  about  the  operational  policy  that  is  unique 
to  a  particular  computing  installation. 


IAP  -  Feasibility  Study  For  an  Energy  Management  System 
Intelligent  Alarm  Processor :  [21] 

Problem  Domain:  Modern  energy  management  systems  all  have  some  form  of  alarm  processing  to  alert  the 
operators  to  power  system  parameters  that  are  out  of  normal  range  or  to  changes  that  may  affect  the 
operation  of  the  power  system.  Alarms  can  be  processed  and  given  to  the  operators  on  the  CRT  display  very 
rapidly  and  this  has  led  to  concern  about  the  way  alarms  are  processed. 

Design  Goals:  Several  recommendations  for  improving  the  alarm  processing  has  been  made.  The  following  are 
a  few  examples: 

1)  EMS  systems  should  present  transformed  data  to  the  operator  not  just  volumes  of  raw  data. 

2)  The  transformation  of  the  alarm  data  should  be  done  in  such  a  way  as  to  Improve  the  operator's 

view  of  the  power  system,  offer  a  larger  and  better  base  to  make  decisions,  and  convey  a 

clearer  idea  of  the  power  system  condition  causing  the  alarm. 

3)  Alarm  priority  should  be  changed  dynamically  as  system  conditions  change. 

Architecture:  One  assumption  build  into  the  Intelligent  Alarm  Processor  (IAP)  Is  the  need  for  processing 

speed  so  that  the  expert  system  does  not  itself  put  an  Intolerable  delay  in  the  display  of  alarm  results 

and  analyses.  For  this  reason,  the  rules  that  govern  the  processing  of  the  alarms  can  be  set  up  to  reduce 
the  depth  of  analysis  performed  on  each  alarm  when  a  large  burst  of  alarms  Is  encountered  and  then  to 
return  to  the  normal  analysis  after  the  disturbance  has  passed. 

Language:  The  first  several  prototypes  of  the  expert  system  were  written  In  FORTRAN  since  most  power 
systems  analysis  software  is  written  in  FORTRAN  the  people  trained  in  its  development  are  usually  well 
versed  in  this  language.  However,  later  in  the  design  process  LISP  was  found  to  be  a  superior  language  for 
developing  the  system.  The  only  drawback  to  using  LISP  is  the  need  to  occasionally  call  for  results  from  a 
calculation  which  exists  in  FORTRAN  program.  Therefore,  future  implementation  of  expert  systems  In  EMS 
systems  will  require  one  of  the  LISP  systems  which  can  interface  to  other  languages  when  needed. 

Status: 

Assessment:  The  IAP  appears  to  be  Just  a  prototype  and  it  still  has  a  long  way  to  go  before  It  could  be 
used  in  the  EMS  systems.  Its  feasibility  was  tested  using  a  dispatcher  training  simulator  and  it  has  not 
been  tested  on  the  real  modern  energy  management  systems.  The  was  no  indication  of  the  response  time  of 
the  system. 

Future  Work:  The  work  so  far  has  demonstrated  the  feasibility  of  using  AI  techniques  to  solve  a  very 

difficult  problem  facing  the  users  of  energy  management  systems.  More  extensive  wcrk  is  now  being 

conducted  to  determine  the  type  of  rules  and  the  ways  in  which  the  knowledge  base  should  be  built  for  an 
actual  IAP  installation.  It  is  expected  that  a  working  prototype  will  be  tested  in  an  EMS  installation  by 
1987. 

PICOB:  A  Real-Time  Expert  System  For  Process  Control:  ( 9 ] 

Problem  Domain:  In  a  large  process  plant,  such  as  a  power  plant,  refinery  or  other  such  process,  there  are 
several  thousand  measurements  and  alarms  provided  to  the  human  operator.  The  large  size  and  dynamic  nature 
of  the  domain  requtres  new  approaches  to  the  inference,  since  exhaustive  search  procedures  arc  not 
possible  In  real-time. 

Design  Goals:  Design  an  expert  system  to  perform  inference  as  would  a  human  expert,  who  is  confronted  with 

the  same  problem  of  a  limited  time  to  respond  to  complex  situation.  The  key  concepts  are: 

1)  To  recognize  quickly  process  conditions  which  are  potentially  significant;  and 

2)  To  Invoke  relevant  rule-sets  and  focus  on  these  problem  areas  for  diagnosis  and  procedural 
advice. 

In  addition,  there  were  two  real-time  design  considerations: 

1)  Dynamic  nature  of  the  domain  "facts"  presents  a  particular  challenge. 

2)  Large  size  of  the  knowledge  base  required  for  a  realistic  implementation. 

Architecture:  The  Process  Intelligent  Control  (PICON)  package  is  designed  to  operate  on  a  LISP  machine 
interfaced  with  a  conventional  distributed  system,  where  as  many  as  20,000  measurement  points  may  be 
assessed.  This  presents  a  major  communication  problem,  which  was  solved  by  using  the  LAMBDA  machine  from 
LMI.  The  LAMBDA  provides  two  processors  running  in  parallel:  a  LISP  processor  for  the  expert  system  and  a 
68010  processor  for  real-time  data  access  and  certain  low-level  Inference  tasks. 

Cons Iderational  efficiency  led  to  a  design  utilizing  two  parallel  processors: 

-  A  68010  running  a  C-coded  package  called  RTIME  (Real  Time  Intelligent  Machine  Environment). 
RTIME  performs  process  condition  analysis,  as  directed  by  the  expert  system  in  a  LISP 
processor. 
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Logic  rules  an  procedures  are  used  when  required  for  the  diagnostic  Inference.  PICON  mimics  the 
expert  process  operator  In  this  regard:  logic  rules  and  procedures  are  Invoked  specially  when  they  are 
required  for  diagnosis  of  a  process  problem,  or  as  requested  for  a  specific  step  In  the  Inference. 

The  design  Includes  the  ability  to  change  the  time  period  of  measurement  and  algorithm  processing  In 
Individual  cases.  Therefore,  In  effect,  the  system  can  "focus  attention"  to  a  specific  area  of  the  process 
plant,  and  put  all  associated  measurements  and  rules  for  that  area  on  frequent  scan.  This  can  be  done 
under  control  of  the  LISP  program. 

Another  use  of  this  "focus"  facility  is  to  scan  the  plant  in  a  background  mode,  focusing  attention  on 
parts  of  the  plant  to  evaluate  unit  process  performance  and  detect  subtle  problems,  utilizing  both  the 
knowledge  base  of  the  expert  process  operator  and  the  expert  process  engineer. 

It  should  be  noted  that  the  ability  to  focus  not  only  emulates  the  way  a  human  expert  works,  but 
also  it  avoids  the  problems  associated  with  overloading  the  distributed  process  system  with  request  for 
information. 

Knowledge  Base  and  Inferencing:  The  inference  engine  Includes  both  forward  and  backward  chaining,  since 
within  the  context  of  an  alarm  advisor,  there  are  requirements  for  both  of  these  procedures. 

There  are  two  types  of  knowledge  in  the  knowledge  base: 

1)  Process  control  knowledge 

2)  Heuristic  knowledge 

The  heuristic  knowledge  base  is  organized  in  a  taxonomy  of  frame-like  structure.  This  was  chosen  for 
r  generality,  and  also  to  facilitate  explanation.  It  Includes  provision  for  certain  factors,  permits 

backward  chaining  diagnostic  inference. 

Status:  The  PICON  package  provides  a  knowledge  based  structure,  facilities  for  acquiring  the  knowledge 
base  in  an  organized  manner,  and  real-time  collection  of  data  with  some  parallel  processing  of 
inf erence,and  higher  level  inference  tools.  The  individual  applications  require  specific  knowledge 
engineering,  which  is  facilitated  using  the  tools  we  have  described. 

Future  Work:  In  the  future  applications  such  as  plant  optimization,  overall  plant  and  corporate 
scheduling,  plant  design  and  other  high  level  planning  will  be  considered  for  expert  system  application. 
These  will  require  further  development  of  yet  more  sophisticated  expert  system  tool. 


A  RULE-EASED  SUPERVISORY  CONTROL  SYSTEM  FOR  MANUFACTURING:  [19] 

Problem  Domain:  The  cement  manufacturing  process,  and  in  particular  the  kilning  stage,  has  acted  as  a 
focus  for  the  assessment  of  alternative  control  techniques,  and  specially  for  the  investigation  of  rule 
based  control. 

There  are  two  main  reasons  for  this  attempt:  first  the  kiln  process  is  very  complex  and  is  subject  to 
a  number  of  problems  such  as,  changes  in  raw  materials  composition,  random  process  disturbance,  and  long 
process  lags.  Past  attempts  at  automating  the  supervisory  control  of  the  process  based  on  conventional 
techniques  have  not  been  sufficiently  robust  to  be  useful  In  the  kiln  environment.  Secondly,  the 
potential  payback  in  terms  of  energy  saving  is  very  large. 

Architecture:  The  computer  system  is  based  on  the  PDP  11  series  (11/23  or  11/73),  with  all  the  software 
running  transparently  under  the  RSX-ll  M  operating  system,  providing  a  full  multi-tasking  multi-user 
real-time  environment.  All  software  is  sourced  in  C  and  MACRO;  conventional  At  languages  were  considered 
but  discarded  at  the  system  design  stage,  due  to  the  real-time  operating  constraint  and  the  amount  of 
floating  point  mathematics  required. 

The  number  of  data  base  "Items"  that  can  be  accommodated  is  dependent  on  the  memory  available. 

Knowledge  Base  and  Inferencing:  Data  frames  are  used  to  describe  plant  items  and  their  treatment.  Several 
types  of  data  frames  are  available,  which  in  effect  form  a  composite  knowledge  base. 

Inferencing  procedure:  Knowledge,  strategy,  procedure  and  control  mechanisms  are  all  handled  by  the 
Linguistic  Control  Language,  a  Language  with  limited  forward  chaining  combining  the  normal  functions  of 
real-time  process  control  languages  with  a  technique  for  embodying  knowledge  of  the  process  expert  as  sets 
of  linguistically  expressed  rules.  The  language  also  handles  uncertainties. 

Status:  The  system  has  been  installed  in  Blue  Aberthaw  works  since  early  1985,  and  has  been  conducting  the 
closed  loop  supervisory  control  and  optimization  of  the  process.  In  use,  the  system  has  proven  its  worth. 
Linguistic  rules  have  been  shown  to  permit  complex  processes  to  be  easily  described  and  successfully 
controlled.  It  enabled  the  Blue  Circle  to  gain  ever  greater  insight  into  the  process.  Finally,  all  the 
indicators  are  that  the  5T  energy  reduction  aimed  at  is  achievable,  with  all  the  cost  saving  implications. 
The  system  Is  being  Jointly  marketed  as  a  commercial  product. 


AM  EXPERT  SUPERVISOR  FOR  A  ROTARY  CMff  KILN:  [14] 

Problem  Domain:  Conventional  control  schemes  in  cement  manufacture  have  not  succeeded  in  achieving  the 
desired  results  due  in  part  to  both  cost  snd  process  constraints.  Processes  such  as  this  are  generally 
controlled  *ttf  l  significant  level  of  human  experts. 
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Knowledge  Base  and  Inferenctng:  The  knowledge  base  has  been  developed  in  the  form  of  production  rules.  The 
operating  mechanism  for  the  production  system  consists  of  a  long  term  memory  (LTM)  and  a  short  term 
memory  (STM).  The  former  contains  set  of  rules  and  the  latter  data  pertinent  to  the  current  state  of  the 
process.  When  information  in  the  STM  has  been  utilized  it  may  be  replaced  in  total  or  in  part  by  new  data. 
The  main  program  is  goal  driven,  with  top  goal  being  to  determine  the  KILN  CONDITION. 

Language:  The  logical  language  PROLOG  was  chosen  for  writing  the  sets  of  rules.  The  version  used  was  YORK 
Portable  Prolog  for  which  source  code  in  ISO  Pascal  was  available.  This  has  been  installed  on  several 
computers,  such  as  IBM-PC. 

Status:  This  paper  only  presents  an  approach  for  developing  knowledge  based  process  supervision  and 
control  for  cement  kiln.  The  author  claims  that  the  techniques  for  developing  expert  systems  in  this 
situation  are  not  yet  well  established.  The  total  knowledge  is  neither  available  nor  capable  of  complete 
utilization  within  the  present  structure  for  knowledge  representation. 

THE  ALVEI  RESCU  PROJECT-  A  PROGRESS  REPORT  [20] 

Problem  Domain:  RESCU  is  a  real-time  expert  System  Club  of  Users  who  are  collaborating  with  financial 
assistance  from  the  ALVEY  program  in  a  project  to  establish  the  potential  of  exert  systems  in  process 
engineering. 

Design  Goals:  The  application  selected  was  to  apply  the  expert  systems  techniques  to  the  quality  control 
of  an  Ethoxylates  plant  at  ICI  Wilton.  The  system  covers  process  modeling,  process  tracking,  control, 
recipe,  recommendations  and  explanations. 

Architecture:  The  expert  system  is  developed  on  a  DEC  VAX  LI 730  under  VMS  using  the  P0PL0G  development 
environment,  with  a  color  display  system  used  to  support  the  plant  operator’s  interface  and  plant  data 
being  acquired  automatically  from  an  already  installed  Foxbourough  Fox  1/A  computer. 

Language:  Poplog 

Status:  May  i985,  the  project  moved  to  the  prototype  development  and  integration  phase.  At  the  end  of 
August,  nearly  all  components  had  been  completed  and  some  had  been  tested  in  isolation.  Some  components 
had  been  combined  into  subsystems  and  tested  as  cooperating  elements  under  communication  infrastructure. 

Future  Work:  The  next  stage  of  the  project  is  to  move  towards  complete  prototype  integration  in  parallel 
with  process  of  on-site  knowledge  elicitation  and  representation  on  the  RESCU  KRL.  There  will  then  follow 
a  period  of  on-site  commissioning,  knowledge  refinement  and  assessment  of  the  prototype. 

INTENSIVE  CARE  UNIT  MONITORING  USING  A  REAL-TIME  EXPERT  SYSTEM:  [2} 

Problem  Domain:  Conventional  alarm  system s  are  typically  unable  to  handle  patient/disease  specificity, 
temporal /dynamic  changes, and  multivariate  interactions.  The  existing  alarm  systems  used  in  monitoring  ICU 
have  many  limitations.  In  actual  clinical  practice,  the  good  clinician  is  able  to  circumvent  these 
limitations.  But,  what  if  an  astute  clinician  is  not  attending  the  patient?  Under  these  conditions,  it  is 
quite  possible  that  a  significant  physiologic  derangement  is  missed.  Therefore,  some  means  is  required  to 
help  the  clinician  in  these  situations.  A  real-time  expert  system  was  proposed  to  do  the  job. 

Architecture:  Production  rules  are  proposed  for  developing  the  system.  The  knowledge  base  is  divided  in  to 
chunks  of  rules  were  each  node  contain  production  rules  that  are  applicable  during  a  certain  time 
Interval.  That  is,  these  chunks  of  production  rules  could  be  viewed  as  separate  systems  which  present 
distinct  processes.  Therefore,  this  architecture  is  fundamentally  parallel  in  nature.  The  system  is 
designed  to  accept  concurrent,  asynchronous  Inputs.  Since  the  processes  are  not  independent  of  each  other, 
there  must  be  some  method  of  interprocess  communication. 

Strategies  for  enabling  comnun teat ion  between  the  various  production  networks  is  being  examined.  The 
following  are  the  Issues  that  must  be  considered: 

1)  Certain  types  of  information  have  to  move  more  quickly  through  the  hierarchy  than  others. 

2)  The  system  must  be  able  to  handle  potential  conflicts,  for  example,  two  conflicting 
expectations. 

It  is  not  clear  whether  conventional  communication  techniques  are  powerful  enough,  or  even 
appropriate,  for  the  needs  of  the  system.  These  standard  techniques  have  arisen  in  traditional  algorithmic 
environments,  not  heuristic  ones.  Moreover,  the  techniques  are  algorithmic  rather  than  heuristic. 

Status:  To  date  the  project  has  accomplished  the  following: 

1)  Identified  certain  major  weaknesses  in  conventional  alarm  systems; 

2)  Developed  a  novel  production  system  architecture  that  is  designed  to  alleviate  these 
weaknesses ; 

3)  Written  many  of  the  rules  for  individual  parameters 

4)  Begun  to  consider  lower  level  implementation  details. 

ERIE  -  An  Expert  Ship  Message  Interpreter:  Theoretical  and  Experimental  [25] 

Problem  Domain:  The  interpretation  of  communicated  messages  become  exceedingly  complex  due  to  ill-formed 
constructs  and  noisy  transmission  channels  and  requires  a  considerable  amount  of  human  information 
processing. 
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Design  Goals:  Make  use  of  the  available  technology  for  processing  natural  language. 
Interpretation  Requl rements 

1)  Considerable  amount  of  task  specific  knowledge 

2)  Large  degree  of  flexibility  In  processing 

3)  Efficient  error  recovery  mechanism. 

Processing  requirements: 

1)  Interpret  or  reject  a  message  In  less  than  60  seconds  of  processing  time. 

2)  Must  be  able  to  process  correctly  at  least  half  of  the  incoming  messages. 


A  failure  to  meet  any  one  of  these  requirements  would  have  drastically  reduced  the  practical  validity 
of  program.  The  following  processing  difficulties  and  goals  have  guided  the  major  design  decisions  in 
creation  of  ERIK: 

1)  Boundaries  between  reports  on  multiple  messages  have  no  clear  markings.  Breaks  between  reports 
must  be  recognized  nevertheless,  or  else  an  entire  report  may  be  parsed  Incorrectly. 

2)  The  reports  are  often  111  formed. 

3)  Due  to  time  and  accuracy  constraints,  ERIK  must  have  the  ability  to  quickly  identify  cases 

that  It  cannot  process  and,  consequently,  to  terminate  further  processing.  However,  the 
rejection  of  reports  must,  in  general,  be  kept  to  a  minimum. 

4)  Only  a  small  fraction  of  the  entire  Information  in  a  message  Is  relevant  to  ERIK.  Determining 
the  relevant  parts  is  one  of  the  major  concerns. 

5)  No  string  dictionary  exists  for  many  fields,  making  identification  of  those  fields  difficult. 

6)  A  limited  natural  language  capability  should  be  given  to  the  interpreter.  This  is  because 
natural  language  Is  occasionally  used  In  reports  that  describe  ship  sail  plans. 

7)  The  access  to  the  data  base  containing  the  ship  names  and  call  signs  should  be  held  to  minimum, 
since  it  Is  very  large. 

Architecture:  ERIK  runs  on  AMVER  (Automated  Mutual-assistance  Vessel  Rescue).  The  source  code  in  LISP  Is 
541  k  words.  It  takes  1218k  words  in  dynamic  memory  of  common  LISP  (this  includes  the  index  Into  the  ship 
and  port  name  data  base  but  not  the  data  base  itself). 

Language:  LISP. 

Perf romance:  Average  processing  time  per  ship  message  depends  on  the  hardware  on  which  ERIK  runs.  For 
example;  on  DEC  VAX  11/785  running  common  LISP: 

the  average  CPU  time  per  ship  report  -  19.35  seconds, 
the  average  CPU  time  per  message  -  27.5  seconds,  and 

the  average  CPU  time  including 

LISP  garbage  collection  time  -  25.51  seconds 

per  ship  report 

the  average  CPU  time  including 

LISP  garbage  collection  time  -  36.26  seconds 

per  message 

However,  when  running  on  Symbolic  LISP  machine,  the  equipment  used  by  the  Coast  Guard,  these  numbers 
are  reduced  by  a  factor  of  two. 

Future  Work:  It  includes  studying  aspects  of  ERIK  that  are  cognitively  valid  on  tasks  such  as  expectation- 
based  spelling  correction,  which  Is  integrated  with  conceptual  analysis,  and  efficient  interpretation  of 
garden  path  sentences. 


4.0  UNRESOLVED  ISSUES  AND  PROBLEMS 

The  systems  described  in  Section  3  are  not  yet  exploiting  the  full  potential  of  this  technology.  In 
the  following  several  issues  are  discussed,  which  form  the  concern  of  researchers  in  the  field,  whose 
resolution  will  hasten  the  advent  of  large  scale  real-time  expert  systems.  The  issues  range  from  the 
ability  to  think  about  and  represent  strategic  requirements  to  the  problems  of  knowledge  representation 
and  lnferenclng  already  discussed. 

Strategy  and  Inference  Procedures:  Current  real-time  expert  systems  tend  :o  use  heuristics  to  guide  the 
search  at  a  surface  level,  and  for  relating  observed  signals  to  implied  underlying  causes  and  faults. 

Few  applications  so  far  have  considered  the  dynamics  of  the  systems  they  are  monitoring  -  most  look 
for  combination  of  static  signal  conditions.  For  less  complex  appllcatlonu,  these  restrictions  are  often 
tolerable,  but  future  controllers  for  very  complex  systems,  capable  of  reasoning  about  and  controlling  new 
situations,  will  have  to  reason  at  deep  levels  about  cause  and  effect  and  dynamic  behaviour  of  the 
observed  system.  Two  areas  of  Interest  become  important:  deep  knowledge  and  simulation  as  a  means  of 
inferring  future  behaviour. 

If  deep  knowledge  could  be  used  both  to  reason  about  and  to  control  new  situations,  then  simulation 
could  play  a  very  substantial  role  in  the  control  of  a  system.  Simulation  could  be  used  as  means  of 
inferring  future  behaviour  and  checking  the  credibility  of  the  hypotheses. 
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It  la  possible  to  reason  about  different  properties  and  constraints  than  those  presented  In  the 
knowledge  base  only  If  we  use  methods  of  reasoning  at  the  level  of  general  cases  and  theories.  The 
heuristics  are  then  at  a  ouch  deeper  level  than  surface  heuristics.  There  may  be  some  drawbacks,  however, 
since  these  levels  don’t  encompass  any  of  the  Induced  heuristics  that  an  experienced  plant  operator  may 
have  gained.  Therefore,  there  may  be  different  levels  at  which  the  knowledge -based  control  could  act.  The 
higher  level  representations  are  more  flexible,  but  are  more  expensive  In  computational  terms.  However, 
many  are  convinced  that  by  concentrating  efforts  on  systems  working  at  these  high  levels,  more  Intelligent 
systems  can  be  built.  In  particular,  we  may  be  able  to  construct  systems  which  can  reason  correctly  In  a 
certain  percentage  of  unforeseen  circumstances;  a  rather  exciting  possibility. 

Representation:  The  success  of  a  rule-baaed  controller  depends  obviously  on  the  representation  of  the 
process.  The  rules  need  to  be  compacted,  if  the  speed  of  response  of  the  system  Is  not  to  deteriorate  as 
the  number  of  rules  Increases.  This  may  be  done  in  several  ways,  for  example  by  grouping  together  the 
rules  which  apply  to  a  particular  component,  or  by  ordering  them  according  to  the  number  of  separate 
clauses  in  the  antecedent  of  the  rule. 

A  frame-based  structure  lends  Itself  particularly  well  to  process  control  and  maintenance.  A  frame 
plant  component*  may  be  defined,  describing  basic  properties.  Particular  kinds  of  component  are  defined 
as  subclasses.  The  advantage  of  this  kind  of  knowledge  representation  are  flexibility  and  capacity  to 
present  “deep*  knowledge  about  physics  and  materials. 

Deep  level  representation  of  knowledge  Is  more  expensive  In  computational  terms.  However,  many  are 
convinced  that  by  concentrating  efforts  on  systems  working  at  this  level,  more  Intelligent  systems  could 
be  produced. 

Reliability  and  Sanity:  It  appears  that  none  of  the  systems  built  so  far  have  attempted  to  provide  means 
for  checking  the  knowledge  base  for  Inconsistencies.  If  a  procedure  could  be  developed  to  check  this,  then 
it  would  reduce  the  search  time  for  the  cases  In  which  Inconsistencies  occur  and  hence  reduce  the  search 
complexity. 
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Knowledge-based  systems  are  now  being  used,  and  will  become  more  wide  spread  as  more  experience  is 
gained.  An  expert  system,  none-the-less ,  Is  quite  similar  to  a  real-time  control  system;  for  example, 
both  are  command  and  event  driven,  have  feedback  loops,  require  the  same  instrumentation  packages,  and 
access  the  same  kind  of  data  from  conventional  data  bases.  The  total  software  package  is  often  hybrid  in 
nature  combining  classical  algorithmic  representat ions  with  knowledge  bases  and  inferenrlng  procedures. 
The  designer  must  allocate  both  the  functional  tasks  and  the  response-time  budgets  among  the  various 
Implementation  devices.  Special  purpose  hardware  and  software  for  this  application  Is  often  essential. 

The  systems  presented  here  have  dealt  with  most  of  the  real-time  requirements.  It  seems  that  they  all 
have  avoided  the  problems  encountered  when  attempting  to  deal  with  dynamic  facts  by  treating  them  as 
static  facts  for  a  particular  Instance.  However,  this  approach  can  not  be  used  for  more  complex  systems, 
and  it  does  not  provide  any  Insight  into  the  past  history  or  future  expectations.  Therefore,  none  of  these 
systems  can  predict  future  problems.  An  approach  for  solving  the  “dynamic  facts'  problem  is  to  employ  deop 
heuristics  or  knowledge  by  applying  qualitative  theorems.  The  area  of  qualitative  heuristics  requires  more 
research  at  the  present  time. 

Setting  up  an  Expert  System: 

For  an  on-line  system  attached  to  a  control  system,  a  good  approach  would  be  to  let  each  system  do 
what  they  do  best:  a  classical  control  system  should  handle  real-time  data  based  on  algorithmic  tasks,  and 
the  rule-based  software  should  perform  the  rule-based  representation  of  the  plan  dynamics  and  the 
strategic  tasks.  The  issue  Is  how  do  you  arrive  at  the  optimal  partition  within  the  cost /performance 
window. 

LISP  for  real-time  control  operations: 

Any  language  or  development  system  that  uses  linked  lists  and  heap  storage,  must  periodically  engage 
In  a  process  of  compacting  memory  storage  areas  that  has  become  deallocated.  This  proces  is  called 
"garbage  collecting".  A  LISP  based  system,  for  example,  must  execute  such  a  procedure.  In  many  cases, 
garbage  collection  is  an  uninteruptable  procedure.  If  Interrupt  service  Is  needed  during  the  garbage 
collection,  it  may  not  be  possible  for  the  system  to  respond  in  time.  Therefore,  if  a  LISP-based  expert 
system  is  to  be  developed,  the  details  of  how  garbage  collection  is  handled  must  be  known  to  the  designer, 
to  Insure  that  It  will  not  interfere  with  the  real-time  functions.  In  addition  Lisp  executes  slowly  on  a 
non-Lisp  machine. 

Development  Systems 

When  comparing  the  capabilities  of  the  commercially  available  expert  system  development  packages,  one 
of  the  first  items  to  examine  is  the  command  language.  The  command  language  used  should  allow  the  user  to 
write  in  the  implementation  language,  if  necessary. 

Using  LISP  hardware  and  software,  allows  development  of  an  expert  system  that  will  run  efficiently  In 
a  real-time  environment.  However,  there  are  rare  exceptions,  the  packages  can  not  be  downloaded  to  any 
other  target  computer.  Work  is  going  on  to  improve  LISP  and  PROLOG  compilers  and  Interpreters  for  standard 
computers. 
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In  terns  of  cost,  LISP  hardware  and  software  is  quite  high  compared  to  a  conventional  computer.  This 
situation  will  change  as  soon  as  low  cost  LISP  machines  become  widely  available.  Other  considerations  for 
selecting  a  development  system  for  an  expert  system  that  will  be  used  in  an  industrial  or  process  control 
environment  include: 


1.  Most  systems  will  require  a  representation  that  Is  hybrid  in  nature.  The  language  used  in  the 
system  builder  should  allow  both  rules  and  frames. 

2.  The  system  should  be  able  to  communicate  with  other  computers,  or  with  other  tasks  in  the  host 
computer.  This  allows  the  expert  systems  to  communicate  with  each  other  and  with  conventional 
software. 


3.  Development  and  run-time  portions  of  the  expert  system  should  be  separable,  bo  that  run-only 
delivery  systems  can  be  developed. 

4.  Multiple  Inference  engines  should  be  available.  This  will  permit  the  knowledge  base  to  be 
designed  to  fit  the  application,  not  the  other  way  around. 

5.  Forward  chaining  and  backward  chaining  are  both  important  in  control  applications. 

Cognitive  Overload  and  Operatorless  Systems:  It  ia  clear  that  as  these  systems  progress  that  more 
strategic  functions  will  be  incorporated  into  the  software.  The  future  of  operatorless  systems  becomes  a 
cause  for  wide  concern.  The  impact  is  not  only  in  union  negotiations,  but  in  productivity,  competitiveness 
and  perhaps  industrial  survival.  The  Issue  is  one  of  broad  social  concern.  Indeed,  machine  intelligence  Is 
a  hidden  time  bomb  In  our  social  fabric,  which  may  have  to  be  dealt  with  long  before  some  of  the  other 
Impending  societal  dooms  we  are  alledgedly  facing. 


Clearly,  the  cognitive  overload  problem  must  be  faced.  The  level  of  complexity  of  systems  is  now 
approaching  the  limits  of  human  cognitive  abilities,  in  terms  of  response  times  and  reliability.  The 
machine  as  ’decision  maker’  or  ’advisor*  becomes  a  issue  which  goes  beyond  the  normal  demands  placed  on 
the  designer. 


Uncertain  Data:  Various  systems  builders  can  operate  with  both  uncertain  input  data  and  with  uncertainty 
associated  with  the  consequences  of  the  rules.  Despite  this  facility,  there  is  still  disagreement  about 
how  the  uncertainty  in  the  physical  world  is  best  represented  in  the  inference  engine,  and  how  Is  Is  best 
characterized  in  the  input  data.  This  field  of  research  will  continue  for  some  time  Into  the  future. 

Strategy  and  Heuristics:  There  is  a  need  for  a  representation  of  high  level  strategic  goals  into  the 
execution  of  the  knowledge  base.  Indeed,  distinguishing  the  point  where  strategy  becomes  tactics  is  of 
importance.  There  Is  a  requirement  here  for  process  descriptions  that  extend  over  more  than  one  snapshot 
of  a  systems  state;  t.e.,  for  extended  Markov  models.  Incorporating  longer  term  trends  into  a  strategic 
response  plan  Is  difficult  and  will  undoubtedly  depend  on  heuristics  derived  from  good  strategist,  at 
least  In  the  beginning.  The  study  of  the  representation  of  strategy  is  an  interesting  and  important  area 
of  research. 


Performance:  Predicting  the  performance  of  an  expert  system  seems  at  this  time  to  be  closer  to  an 
experimental  art  rather  than  a  reasonably  theoretically  based  science. 

The  characteristics  of  a  knowledge  base  are  often  fragile  when  subjected  to  compression  or 
compaction,  therefore,  seeking  speed-ups  based  on  this  approach  requires  great  skill.  The  lack  of  an 
appropriate  approach  can  lead  to  not  finding  the  best  solution  or  not  finding  any  solution. 

Results  from  a  knowledge  base  are  dependent  on  the  boundary  status  of  the  rules.  Interesting  event 
combinations  could  cause  irrational  problems  depending  on  the  rule  structure. 

Commercial  Development:  It  is  difficult  to  Ignore  the  lack  of  commercial  results  in  this  field.  The 
technology  has  gone  commercial  too  fast.  The  field  is  too  young  for  this  to  happen.  The  consequences  will 
be  the  duplication  of  results  and  an  increased  cost  in  the  utilization  of  this  new  technology.  There  Is 
considerable  agruement  for  the  research  to  remain  In  the  Universities  for  a  while  longer  until  the  bale 
problems  have  been  worked  out. 

The  Final  Word 

For  those  of  us  driving  the  technology,  the  challenge  Is  to  think  in  ever  Increasing  levels  of 
ab8tactlon  about  our  machines  and  sytems.  We  are,  at  this  point  In  time,  limited  by  concepts,  not 
technology. 
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of  English.  Incremental  parsing  allows  Immediate  purpose  is  to  aid  a  user  In  applying  available 

remedial  Information  to  be  generated  ff  a  user  analysis  and  synthesis  software  to  complete  the  steps 

deviates  from  the  sublanguage.  Sentences  are  In  the  control  system  engineering  process.  Help  is 

translated  Into  production  rules  using  the  methodology  provided  In  modeling,  constraining,  diagnosing, 

of  Lex  1 ca 1  - Funct 1 ona 1  Grammar.  The  system  Is  written  specifying,  designing  and  simulating  dynamical 


systems.  The  descript  ton  of  CACE-III  wilt  cover  the  assembly  of  compound  hypotheses  for  abduction,  are 

following  toptcs  partitioning  the  knowledge  described  for  use  In  constructing  expert  systems 

corresponding  to  different  stages  in  the  design  Applications  such  as  medical  diagnosis,  design  tasks, 

process.  Implementing  a  lead- lag  compensator  design  and  abstract  reasoning  are  discussed.  85/00/00 

heuristic,  developing  a  limited  form  of  nonmonotonic  07A16699 
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UTTL:  Experts  system  control  of  autonomous  airborne  and  diagnosis 
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solution  is  detailed 


dynamically  generates  the  references  that  ore  used  to  The  purpose  of  this  concept  Is  to  provide  a  high-level 

determine  whether  the  flight  crew  should  be  notified  environment  embodying  expertise  from  the  many  fields 

of  potential  problems.  The  1 mp 1 ementa t I  on  of  this  that  enter  into  integrated  flight  and  engine  controls 

robot  planner  Is  also  discussed  85/00/00  86A28490  design  (aerodynamics,  structures,  propulsion. 
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ABS  In  this  paper,  we  discuss  the  concepts,  requirements  presented.  Parts  of  the  system  are  now  under 

and  architecture  for  an  expert  system  for  integrated  realization  and  testing.  The  system  intends  to  offer 

aircraft/engine  control  systems  analysis  and  design  flexible  and  easy  -  to -operate  tool  to  the  analyst  in 


reliability  assessment  of  complex  engineered  knowledge  from  the  domain  expert,  and  how  that 

installations  The  expert  system  is  organized  knowledge  Is  represented  for  computer  use.  An  , 
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monitoring  today’s  advanced  nigh  performanre  aircraft  rule  based  computer  program  is  discussed.  In  this 

The  flight  status  monitor-  rnr\  he  o 1  v  '  ded  into  two  program  the  human  behavior  in  controlling  a  dynamic 

sections  the  expert  system  iu«if  and  t  h*>  knowledge  process  is  represented  by  a  set  of  production  rules, 

acquisition  tool  tn*s  paper  d  *  *?e«;  trip  i*  now  ’  edqe  The  selection  of  appropriate  production  rules  for  a 

arqutsi  f  Ion  topi,  the  means  .4  » ->  e-far*  given  situation  is  performed  by  ordering  the  rules  for 


systems.  A  multi-layered  expert  system  architecture  Is  DESIGNER  system  leads  to 


human  design,  and  the  Implementation  process  helps  UTIL:  The  blackboard  model  -  A  framework  for 

validate  the  framework.  Issues  discussed  in  this  paper  integrating  multiple  cooperating  expert  systems 

include  the  problem  spaces  used  for  design,  the  loci  AUTH  A/ERICK  SDN .  w  K.  PAA  A/ ( NASA .  Ames  Research 

of  knowledge  and  problem-solving  power,  and  the  Center.  Moffett  Field.  CA)  CORP  National 
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1 4.  Abstract 

*  T  he  use  of  various  forms  of  Artificial  Intelligence  to  help  solve  problems  related  to  guidance  and 
control  implementations  is  a  subject  of  current  interest  m  the  field,  first  applications  hate  been  ot 
Knowledge  Based  methods  to  improved  G  &  C  equipment  maintenance  based  on  "expert 
knowledge”  from  avionics  hardware  experts.  New  programmes  are  in  process  to  bring  knowledge 
based  techniques  to  bear  in  supporting  the  pilot  in  performing  the  tactical  mission.  T  he  intent  of 
this  lecture  series  is  to  describe  clearly  what  Artificial  Intelligence  techniques  mean  with  respect 
to  Guidance  and  Control  applications,  to  offer  some  concrete  examples  of  applications  to  the 
maintenance  area,  some  more  speculative  examples  of  applications  >o  actual  (IA  (  tasks,  and 
a  projection  of  possible  directions  for  the  future. 

Substantial  research  has  been  performed  on  application  ol  knowledge  based  concepts  to  various 
aspects  of  guidance  and  control  systems.  It  is  the  purpose  of  this  le  cture  Series  to  bring  some  ot 
the  results  of  this  research  and  accomplishment  to  the  wider  guidance  and  control  community  In 
providing  in-depth  description  on  principles  of  Al  methods  and  results  of  application  to  real 
problems. 

This  Lecture  Series,  sponsored  by  the  Guidance  and  C  ontrol  Panel  of  AGARD.  has  been 
implemented  by  the  Consultant  and  Exchange  Programme.  . 
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